Approved changes feed: RSS · Atom
cpe:2.3:a:the_qt_company:qt:*:*:windows:*:*:*:*:*part: a version: * update: *
| Vendor | The Qt Company (55c5e61e-8471-54fe-9e56-c16da6176b09) |
|---|---|
| Product | Qt (c4f171a0-be47-569b-865a-4bbc631a370e) |
| Edition | windows |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-14576 |
vulnerable | 2026-06-08 07:06:34.726677 |
Possible QML code injection in VectorImage component
Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading malicious SVG files through the VectorImage component in Qt Quick. While QML execution is typically more restricted than native code execution, this could still lead to denial of service, information disclosure, or other impacts depending on the application's privilege level and data access.
Published: 2026-04-30T12:39:40.067Z
Updated: 2026-07-29T08:59:25.234Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12385 |
vulnerable | 2026-06-08 07:04:30.146768 |
Improper validation of <img> tag size in Text component parser
Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation.
This issue affects users of the Text component in Qt Quick. Missing validation of the width and height in the <img> tag could cause an application to become unresponsive.
This issue affects Qt: from 5.0.0 through 6.5.10, from 6.6.0 through 6.8.5, from 6.9.0 through 6.10.0.
Published: 2025-12-03T19:38:53.130Z
Updated: 2026-07-29T08:58:29.240Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.