CVE-2025-5683
CVE-2025-5683
This page contains facts from public vulnerability sources. Check the original advisory before updating.
When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.
CVSS 5.1 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
qt
- Versions
- ≥ 0, < 6.3.0: Not affected (python)
- ≥ 6.3.0, ≤ 6.5.9: Affected (python)
- 6.5.10: Not affected (python)
- ≥ 6.6.0, ≤ 6.8.4: Affected (python)
- 6.8.5: Not affected
- 6.9.0: Affected
- 6.9.1: Not affected
Update to 6.5.10; Update to 6.8.5; Update to 6.9.1
qt6-imageformats Debian:12
- Versions
- 6.10.2-1
- 6.10.2-2
- 6.10.2-3
- 6.11.2-1
- 6.4.2-1
- 6.4.2-2
- 6.4.2-3
- 6.4.2-4
- 6.4.2-5
- 6.6.0-1
- 6.6.1-1
- 6.6.2-1
- 6.6.2-2
- 6.7.2-1
- 6.7.2-2
- 6.8.2-1
- 6.8.2-2
- 6.8.2-3
- 6.8.2-4
- 6.9.1-1
- 6.9.1-2
- 6.9.2-1
- 6.9.2-2
- 6.9.2-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qt6-imageformats Debian:13
- Affected ranges
- ECOSYSTEM: < 6.8.2-4
Update to 6.8.2-4
qt6-imageformats Debian:14
- Affected ranges
- ECOSYSTEM: < 6.8.2-4
Update to 6.8.2-4
qtimageformats-opensource-src Debian:12
- Versions
- 5.15.10-1
- 5.15.10-2
- 5.15.12-1
- 5.15.13-1
- 5.15.13-2
- 5.15.15-1
- 5.15.15-2
- 5.15.15-3
- 5.15.15-4
- 5.15.17-1
- 5.15.17-2
- 5.15.18-1
- 5.15.19-1
- 5.15.19-2
- 5.15.8-2
- 5.15.9-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtimageformats-opensource-src Debian:13
- Affected ranges
- ECOSYSTEM: < 5.15.15-4
Update to 5.15.15-4
qtimageformats-opensource-src Debian:14
- Affected ranges
- ECOSYSTEM: < 5.15.15-4
Update to 5.15.15-4
qtimageformats-opensource-src Ubuntu:16.04:LTS
- Versions
- 5.4.2-2build1
- 5.5.1-2build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtimageformats-opensource-src Ubuntu:18.04:LTS
- Versions
- 5.9.1-1
- 5.9.2-1
- 5.9.2-2
- 5.9.3-1ubuntu1
- 5.9.4-0ubuntu1
- 5.9.5-0ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtimageformats-opensource-src Ubuntu:20.04:LTS
- Versions
- 5.12.4-1
- 5.12.5-1
- 5.12.5-1build1
- 5.12.8-0ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qt6-imageformats Ubuntu:22.04:LTS
- Versions
- 6.2.2-2
- 6.2.4-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtimageformats-opensource-src Ubuntu:22.04:LTS
- Versions
- 5.15.2-2
- 5.15.2-2build1
- 5.15.3-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qt6-imageformats Ubuntu:24.04:LTS
- Versions
- 6.4.2-4
- 6.4.2-5
- 6.4.2-5build1
- 6.4.2-5build2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtimageformats-opensource-src Ubuntu:24.04:LTS
- Versions
- 5.15.10-2
- 5.15.12-1
- 5.15.12-1build1
- 5.15.12-1build2
- 5.15.13-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qt6-imageformats Ubuntu:25.10
- Versions
- 6.8.3-0ubuntu1
- 6.9.2-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtimageformats-opensource-src Ubuntu:25.10
- Versions
- 5.15.15-3
- 5.15.15-4
- 5.15.17-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qt6-imageformats Ubuntu:26.10
- Versions
- 6.10.2-1
- 6.10.2-3
- 6.11.2-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtimageformats-opensource-src Ubuntu:26.10
- Versions
- 5.15.18-1
- 5.15.19-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qt6-imageformats Ubuntu:26.04:LTS
- Versions
- 6.9.2-1
- 6.9.2-3
- 6.10.2-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtimageformats-opensource-src Ubuntu:26.04:LTS
- Versions
- 5.15.17-1
- 5.15.17-2
- 5.15.18-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published