CVE-2025-14575
CVE-2025-14575 · Uncontrolled Search Path Element in Qt Network OpenSSL TLS backend allows rogue CA certificate loading
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An Uncontrolled Search Path Element vulnerability in the OpenSSL TLS backend of Qt Network (qtbase) in Qt Qt Framework (Unix) allows a local attacker to load a rogue CA certificate as a trusted system authority via a crafted certificate file placed in the application's working directory.
CVSS 1.8 · Low · EPSS 0.1%
- Published
- Updated
Stack: system
Affected products and versions
qt
- Versions
- ≥ 5.0.0, ≤ 5.15.19: Affected (python)
- ≥ 6.0.0, ≤ 6.5.9: Affected (python)
- ≥ 6.6.0, ≤ 6.8.3: Affected (python)
- ≥ 6.9.0, ≤ 6.9.1: Affected (python)
No fix published
qtbase-opensource-src Ubuntu:Pro:16.04:LTS
- Versions
- 5.4.2+dfsg-2ubuntu9
- 5.5.1+dfsg-6ubuntu4
- 5.5.1+dfsg-10ubuntu2
- 5.5.1+dfsg-13ubuntu1
- 5.5.1+dfsg-13ubuntu2
- 5.5.1+dfsg-13ubuntu3
- 5.5.1+dfsg-14ubuntu1
- 5.5.1+dfsg-14ubuntu2
- 5.5.1+dfsg-14ubuntu3
- 5.5.1+dfsg-15ubuntu1
- 5.5.1+dfsg-16ubuntu1
- 5.5.1+dfsg-16ubuntu6
- 5.5.1+dfsg-16ubuntu7
- 5.5.1+dfsg-16ubuntu7.1
- 5.5.1+dfsg-16ubuntu7.2
- 5.5.1+dfsg-16ubuntu7.5
- 5.5.1+dfsg-16ubuntu7.6
- 5.5.1+dfsg-16ubuntu7.7
- 5.5.1+dfsg-16ubuntu7.7+esm1
- 5.5.1+dfsg-16ubuntu7.7+esm2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtbase-opensource-src-gles Ubuntu:16.04:LTS
- Versions
- 5.4.2+dfsg-2ubuntu9
- 5.5.1+dfsg-6ubuntu1
- 5.5.1+dfsg-10ubuntu1
- 5.5.1+dfsg-13ubuntu1
- 5.5.1+dfsg-13ubuntu2
- 5.5.1+dfsg-13ubuntu3
- 5.5.1+dfsg-14ubuntu1
- 5.5.1+dfsg-14ubuntu2
- 5.5.1+dfsg-14ubuntu3
- 5.5.1+dfsg-15ubuntu1
- 5.5.1+dfsg-16ubuntu1
- 5.5.1+dfsg-16ubuntu4
- 5.5.1+dfsg-16ubuntu5
- 5.5.1+dfsg-16ubuntu6
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtbase-opensource-src Ubuntu:Pro:18.04:LTS
- Versions
- 5.9.1+dfsg-10ubuntu1
- 5.9.1+dfsg-10ubuntu2
- 5.9.2+dfsg-4ubuntu6
- 5.9.3+dfsg-0ubuntu1
- 5.9.3+dfsg-0ubuntu3
- 5.9.3+dfsg-0ubuntu4
- 5.9.4+dfsg-0ubuntu3
- 5.9.4+dfsg-0ubuntu4
- 5.9.5+dfsg-0ubuntu1
- 5.9.5+dfsg-0ubuntu2
- 5.9.5+dfsg-0ubuntu2.1
- 5.9.5+dfsg-0ubuntu2.3
- 5.9.5+dfsg-0ubuntu2.4
- 5.9.5+dfsg-0ubuntu2.5
- 5.9.5+dfsg-0ubuntu2.6
- 5.9.5+dfsg-0ubuntu2.6+esm1
- 5.9.5+dfsg-0ubuntu2.6+esm2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtbase-opensource-src Ubuntu:Pro:20.04:LTS
- Versions
- 5.12.4+dfsg-4ubuntu1
- 5.12.5+dfsg-2
- 5.12.5+dfsg-8
- 5.12.5+dfsg-8build1
- 5.12.5+dfsg-9build1
- 5.12.8+dfsg-0ubuntu1
- 5.12.8+dfsg-0ubuntu2.1
- 5.12.8+dfsg-0ubuntu2.1+esm1
- 5.12.8+dfsg-0ubuntu2.1+esm2
- 5.12.8+dfsg-0ubuntu2.1+esm3
- 5.12.8+dfsg-0ubuntu2.1+esm4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtbase-opensource-src-gles Ubuntu:20.04:LTS
- Versions
- 5.12.4+dfsg-1build1
- 5.12.5+dfsg-1
- 5.12.5+dfsg-2
- 5.12.8+dfsg-0ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qt6-base Ubuntu:22.04:LTS
- Versions
- 6.2.2+dfsg-5ubuntu1
- 6.2.2+dfsg-6ubuntu1
- 6.2.2+dfsg-6ubuntu2
- 6.2.4+dfsg-1ubuntu1
- 6.2.4+dfsg-2ubuntu1
- 6.2.4+dfsg-2ubuntu1.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtbase-opensource-src-gles Ubuntu:22.04:LTS
- Versions
- 5.15.2+dfsg-4
- 5.15.2+dfsg-5
- 5.15.3+dfsg-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtbase-opensource-src Ubuntu:Pro:22.04:LTS
- Versions
- 5.15.2+dfsg-12
- 5.15.2+dfsg-13
- 5.15.2+dfsg-14
- 5.15.2+dfsg-14ubuntu1
- 5.15.2+dfsg-14ubuntu3
- 5.15.2+dfsg-15
- 5.15.3+dfsg-1
- 5.15.3+dfsg-2
- 5.15.3+dfsg-2ubuntu0.1
- 5.15.3+dfsg-2ubuntu0.2
- 5.15.3+dfsg-2ubuntu0.2+esm1
- 5.15.3+dfsg-2ubuntu0.2+esm2
- 5.15.3+dfsg-2ubuntu0.2+esm3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qt6-base Ubuntu:24.04:LTS
- Versions
- 6.4.2+dfsg-18
- 6.4.2+dfsg-19
- 6.4.2+dfsg-19build1
- 6.4.2+dfsg-20
- 6.4.2+dfsg-21
- 6.4.2+dfsg-21.1build4
- 6.4.2+dfsg-21.1build5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtbase-opensource-src-gles Ubuntu:24.04:LTS
- Versions
- 5.15.10+dfsg-2
- 5.15.10+dfsg-3
- 5.15.12+dfsg-1
- 5.15.12+dfsg-1ubuntu1
- 5.15.12+dfsg-1ubuntu2
- 5.15.13+dfsg-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtbase-opensource-src Ubuntu:Pro:24.04:LTS
- Versions
- 5.15.10+dfsg-3
- 5.15.10+dfsg-5
- 5.15.10+dfsg-5ubuntu1
- 5.15.12+dfsg-1ubuntu1
- 5.15.12+dfsg-3ubuntu1
- 5.15.12+dfsg-3ubuntu6
- 5.15.12+dfsg-3ubuntu7
- 5.15.13+dfsg-1ubuntu1
- 5.15.13+dfsg-1ubuntu1+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qt6-base Ubuntu:25.10
- Versions
- 6.8.3+dfsg-0ubuntu2
- 6.8.3+dfsg-0ubuntu3
- 6.9.2+dfsg-1ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtbase-opensource-src Ubuntu:25.10
- Versions
- 5.15.15+dfsg-4ubuntu1
- 5.15.15+dfsg-5ubuntu1
- 5.15.17+dfsg-1ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtbase-opensource-src-gles Ubuntu:25.10
- Versions
- 5.15.15+dfsg-2
- 5.15.17+dfsg-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qt6-base Ubuntu:26.10
- Versions
- 6.10.2+dfsg-7
- 6.10.2+dfsg-14ubuntu2
- 6.10.2+dfsg-15
- 6.10.2+dfsg-16
- 6.11.2+dfsg-4ubuntu2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtbase-opensource-src Ubuntu:26.10
- Versions
- 5.15.18+dfsg-1ubuntu1
- 5.15.19+dfsg-2ubuntu1
- 5.15.19+dfsg-2ubuntu2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtbase-opensource-src-gles Ubuntu:26.10
- Versions
- 5.15.18+dfsg-1
- 5.15.19+dfsg-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qt6-base Ubuntu:26.04:LTS
- Versions
- 6.9.2+dfsg-1ubuntu1
- 6.9.2+dfsg-2
- 6.9.2+dfsg-3ubuntu1
- 6.9.2+dfsg-3ubuntu2
- 6.9.2+dfsg-4
- 6.10.2+dfsg-3
- 6.10.2+dfsg-6
- 6.10.2+dfsg-7
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtbase-opensource-src Ubuntu:26.04:LTS
- Versions
- 5.15.17+dfsg-1ubuntu1
- 5.15.17+dfsg-1ubuntu2
- 5.15.18+dfsg-1ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtbase-opensource-src-gles Ubuntu:26.04:LTS
- Versions
- 5.15.17+dfsg-1
- 5.15.17+dfsg-2
- 5.15.18+dfsg-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published