Approved changes feed: RSS · Atom
cpe:2.3:a:the_qt_company:qt:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | The Qt Company (55c5e61e-8471-54fe-9e56-c16da6176b09) |
|---|---|
| Product | Qt (c4f171a0-be47-569b-865a-4bbc631a370e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-6210 |
vulnerable | 2026-06-08 08:07:04.558236 |
Type confusion and heap-buffer-overflow in Qt SVG marker handling causing application crash
A type confusion vulnerability in Qt SVG allows an attacker to cause an application crash via a crafted SVG image.
When processing SVG marker references, the renderer retrieves a node by its id attribute and casts it to QSvgMarker* without verifying the node type. A non-marker element (such as a <line> element) that references itself as a marker triggers an out-of-bounds heap read due to the object size difference between QSvgLine and QSvgMarker,
followed by an endless recursion that bypasses the marker recursion
guard through incorrect virtual dispatch. The result is an application
crash (denial of service).
This issue affects Qt SVG:
from 6.7.0 before 6.8.8, from 6.9.0 before 6.11.1.
Published: 2026-05-06T11:59:01.727Z
Updated: 2026-07-29T08:59:56.543Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6338 |
not_vulnerable | 2026-06-08 07:43:14.867209 |
Possible denial of service with multiple incoming connections to a Schannel based server with a TLS backend
There is an incomplete cleanup vulnerability in Qt Network's Schannel support on Windows which can lead to a Denial of Service over a long period.
This issue affects Qt from 5.15.0 through 6.8.3, from 6.9.0 before 6.9.2.
Published: 2025-10-16T09:22:14.709Z
Updated: 2026-07-29T08:54:20.124Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-5992 |
not_vulnerable | 2026-06-08 07:37:26.222839 |
Passing values outside of expected range to QColorTransferGenericFunction can cause a denial of service
When passing values outside of the expected range to QColorTransferGenericFunction it can cause a denial of service, for example, this can happen when passing a specifically crafted ICC profile to QColorSpace::fromICCProfile.
This issue affects Qt from 6.6.0 through 6.8.3, from 6.9.0 through 6.9.1. This is fixed in 6.8.4 and 6.9.2.
Published: 2025-07-11T06:45:15.082Z
Updated: 2026-07-29T08:53:39.958Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-5991 |
not_vulnerable | 2026-06-08 07:37:26.222534 |
Use after free in QHttp2ProtocolHandler
There is a "Use After Free" vulnerability in Qt's QHttp2ProtocolHandler in the QtNetwork module. This only affects HTTP/2 handling, HTTP handling is not affected by this at all. This happens due to a race condition between how QHttp2Stream uploads the body of a
POST request and the simultaneous handling of HTTP error responses.
This issue only affects Qt 6.9.0 and has been fixed for Qt 6.9.1.
Published: 2025-06-11T07:33:41.071Z
Updated: 2026-07-29T08:33:06.935Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-5683 |
not_vulnerable | 2026-06-08 07:37:25.449877 |
Details available
When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash.
This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.
Published: 2025-06-05T05:31:13.926Z
Updated: 2026-07-29T07:35:59.874Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-5455 |
vulnerable | 2026-06-08 07:37:24.807788 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4211 |
vulnerable | 2026-06-08 07:29:15.575262 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3512 |
not_vulnerable | 2026-06-08 07:23:09.216605 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14576 |
vulnerable | 2026-06-08 07:06:34.725411 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14575 |
vulnerable | 2026-06-08 07:06:34.724873 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12385 |
vulnerable | 2026-06-08 07:04:30.145921 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-10729 |
vulnerable | 2026-06-08 07:02:27.425752 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-10728 |
vulnerable | 2026-06-08 07:02:27.425260 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.