What is the CVSS score of CVE-2025-5992?

CVE-2025-5992 has a CVSS 4.0 base score of 2.3 (Low). CVSS vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L. EPSS exploitation probability: 0.1%.

Which versions of Ubuntu are affected by CVE-2025-5992?

CVE-2025-5992 is a low-severity vulnerability involving input validation (CVSS 2.3).. A patch is available.

How to fix or mitigate CVE-2025-5992?

During next maintenance window: Apply vendor patches when convenient. Verify input validation controls are in place.

Ubuntu CVE-2025-5992

EUVD-2025-21120 LOW

Improper Input Validation (CWE-20)

2025-07-11 a59d8014-47c4-4630-ab43-e1b13cbe58e3

Denial Of Service Ubuntu Debian

2.3

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

2.3 LOW

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L

Ubuntu

MEDIUM

qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

EUVD ID Assigned

Mar 16, 2026 - 08:17 euvd

EUVD-2025-21120

Analysis Generated

Mar 16, 2026 - 08:17 vuln.today

CVE Published

Jul 11, 2025 - 07:15 nvd

LOW 2.3

DescriptionCVE.org

When passing values outside of the expected range to QColorTransferGenericFunction it can cause a denial of service, for example, this can happen when passing a specifically crafted ICC profile to QColorSpace::fromICCProfile.This issue affects Qt from 6.6.0 through 6.8.3, from 6.9.0 through 6.9.1. This is fixed in 6.8.4 and 6.9.2.

Analysis

Technical ContextAI

A denial of service vulnerability allows an attacker to disrupt the normal functioning of a system, making it unavailable to legitimate users. This vulnerability is classified as Improper Input Validation (CWE-20).