CVE-2020-12267: 
NixOS vulnerability analysis and mitigation

CVE-2020-12267 is a security vulnerability discovered in Qt's setMarkdown functionality affecting versions before 5.14.2. The vulnerability was identified in April 2020 and involves a use-after-free issue specifically related to QTextMarkdownImporter::insertBlock (CVE Details, MITRE).

The vulnerability is characterized as a use-after-free issue in the QtGui module's Markdown handling code, specifically within the QTextMarkdownImporter::insertBlock functionality. The use of previously freed memory may corrupt valid data if the memory area has been allocated and used elsewhere (Red Hat).

The vulnerability could allow remote attackers to potentially execute arbitrary code with the privileges of the affected process or cause a Denial of Service condition (Gentoo GLSA).

The vulnerability is remotely exploitable through the Qt application's Markdown handling functionality. The issue was initially discovered through the OSS-Fuzz project, as documented in the bug report (OSS Fuzz).

The vulnerability has been fixed in Qt version 5.14.2 and later releases. Users are advised to upgrade to the latest version of Qt to address this security issue. For Gentoo users specifically, the recommendation is to upgrade to QtGui version 5.14.2 or later using the package management system (Gentoo GLSA).