p PatchFirst

CVE-2022-25255

CVE-2022-25255

This page contains facts from public vulnerability sources. Check the original advisory before updating.

In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a binary from the current working directory when not found in the PATH.

CVSS 7.8 · High · EPSS 0.3% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • qt6-base Debian:12

    Affected ranges
    • ECOSYSTEM: < 6.2.4+dfsg-4

    Update to 6.2.4+dfsg-4

  • qt6-base Debian:13

    Affected ranges
    • ECOSYSTEM: < 6.2.4+dfsg-4

    Update to 6.2.4+dfsg-4

  • qt6-base Debian:14

    Affected ranges
    • ECOSYSTEM: < 6.2.4+dfsg-4

    Update to 6.2.4+dfsg-4

  • qtbase-opensource-src Debian:12

    Affected ranges
    • ECOSYSTEM: < 5.15.2+dfsg-15

    Update to 5.15.2+dfsg-15

  • qtbase-opensource-src Debian:13

    Affected ranges
    • ECOSYSTEM: < 5.15.2+dfsg-15

    Update to 5.15.2+dfsg-15

  • qtbase-opensource-src Debian:14

    Affected ranges
    • ECOSYSTEM: < 5.15.2+dfsg-15

    Update to 5.15.2+dfsg-15

  • qtbase-opensource-src-gles Debian:12

    Affected ranges
    • ECOSYSTEM: < 5.15.4+dfsg-2

    Update to 5.15.4+dfsg-2

  • qtbase-opensource-src-gles Debian:13

    Affected ranges
    • ECOSYSTEM: < 5.15.4+dfsg-2

    Update to 5.15.4+dfsg-2

  • qtbase-opensource-src-gles Debian:14

    Affected ranges
    • ECOSYSTEM: < 5.15.4+dfsg-2

    Update to 5.15.4+dfsg-2

  • qtbase-opensource-src Ubuntu:Pro:20.04:LTS

    Versions
    • 5.12.4+dfsg-4ubuntu1
    • 5.12.5+dfsg-2
    • 5.12.5+dfsg-8
    • 5.12.5+dfsg-8build1
    • 5.12.5+dfsg-9build1
    • 5.12.8+dfsg-0ubuntu1
    • 5.12.8+dfsg-0ubuntu2.1
    • 5.12.8+dfsg-0ubuntu2.1+esm1
    • 5.12.8+dfsg-0ubuntu2.1+esm2
    Affected ranges
    • ECOSYSTEM: < 5.12.8+dfsg-0ubuntu2.1+esm3

    Update to 5.12.8+dfsg-0ubuntu2.1+esm3

  • qt6-base Ubuntu:22.04:LTS

    Versions
    • 6.2.2+dfsg-5ubuntu1
    • 6.2.2+dfsg-6ubuntu1
    • 6.2.2+dfsg-6ubuntu2
    • 6.2.4+dfsg-1ubuntu1
    • 6.2.4+dfsg-2ubuntu1
    • 6.2.4+dfsg-2ubuntu1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qt6-base Ubuntu:24.04:LTS

    Versions
    • 6.4.2+dfsg-18
    • 6.4.2+dfsg-19
    • 6.4.2+dfsg-19build1
    • 6.4.2+dfsg-20
    • 6.4.2+dfsg-21
    • 6.4.2+dfsg-21.1build4
    • 6.4.2+dfsg-21.1build5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qt6-base Ubuntu:25.10

    Versions
    • 6.8.3+dfsg-0ubuntu2
    • 6.8.3+dfsg-0ubuntu3
    • 6.9.2+dfsg-1ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qt6-base Ubuntu:26.10

    Versions
    • 6.10.2+dfsg-7
    • 6.10.2+dfsg-14ubuntu2
    • 6.10.2+dfsg-15
    • 6.10.2+dfsg-16
    • 6.11.2+dfsg-4ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qt6-base Ubuntu:26.04:LTS

    Versions
    • 6.9.2+dfsg-1ubuntu1
    • 6.9.2+dfsg-2
    • 6.9.2+dfsg-3ubuntu1
    • 6.9.2+dfsg-3ubuntu2
    • 6.9.2+dfsg-4
    • 6.10.2+dfsg-3
    • 6.10.2+dfsg-6
    • 6.10.2+dfsg-7
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →