Qt6 WebEngine CVE-2025-141765

MEDIUM

N/A vendor:alpine

Information Disclosure

Lifecycle Timeline

Analysis Generated

May 27, 2026 - 22:34 vuln.today

DescriptionCVE.org

Alpine Linux: qt6-qtwebengine fixed in 6.10.1-r2

AnalysisAI

Qt6 WebEngine (qt6-qtwebengine) on Alpine Linux received a security fix in package version 6.10.1-r2, as reported by the Alpine Linux vendor. The exact nature of the vulnerability, affected attack surface, and potential attacker impact are not disclosed in available intelligence - no CVE description, CVSS score, or CWE classification has been published at time of analysis. Qt WebEngine embeds a Chromium-based rendering engine, meaning historical vulnerabilities in this component have ranged from memory corruption to sandbox escapes; however, no specific claim can be made about this CVE without further vendor disclosure.

Technical ContextAI

Qt WebEngine (qt6-qtwebengine) is the Qt 6 module providing web rendering capabilities built on top of the Chromium browser engine and Blink rendering engine. It is commonly used in Qt-based desktop and embedded applications to display web content. Because it wraps Chromium, vulnerabilities can originate in upstream Chromium code (JavaScript engine V8, media handling, WebGL, etc.) or in Qt's integration layer. The Alpine Linux package version affected is qt6-qtwebengine prior to 6.10.1-r2. No CPE string, CWE root-cause class, or upstream upstream Qt/Chromium advisory has been linked in the available data, making root-cause characterization impossible at this time.

Affected ProductsAI

The affected product is qt6-qtwebengine as packaged in Alpine Linux, specifically versions prior to 6.10.1-r2. The fix was confirmed by the Alpine Linux vendor. No upstream Qt Company advisory, no CPE string, and no version range beyond the Alpine package revision are available in the current intelligence. Users running Alpine Linux with qt6-qtwebengine installed should consult the Alpine Linux security advisories and upgrade to package version 6.10.1-r2 or later.

RemediationAI

The primary remediation is to upgrade the Alpine Linux qt6-qtwebengine package to version 6.10.1-r2 or later using the Alpine package manager: 'apk upgrade qt6-qtwebengine'. The fix has been confirmed by the Alpine Linux vendor. No upstream Qt Company advisory URL, no workaround information, and no compensating controls have been identified in available data. If upgrading immediately is not possible, consider restricting or disabling applications that depend on qt6-qtwebengine from processing untrusted web content until the patch can be applied, noting this may break application functionality. No specific workaround can be recommended without knowing the underlying vulnerability class.