Qt WebEngine CVE-2025-7657

MEDIUM

N/A vendor:alpine

Information Disclosure

Lifecycle Timeline

Analysis Generated

May 27, 2026 - 22:33 vuln.today

DescriptionCVE.org

Alpine Linux: qt6-qtwebengine fixed in 6.9.1-r3

AnalysisAI

Qt WebEngine (qt6-qtwebengine) in Alpine Linux has been patched at package version 6.9.1-r3 to address CVE-2025-7657. The underlying vulnerability type, impact, and attack surface are not disclosed in available intelligence - the sole confirmed data point is the Alpine Linux vendor fix notice. EPSS scoring at 0.15% (35th percentile) indicates low current exploitation probability, and no public exploit code or CISA KEV listing has been identified at time of analysis.

Technical ContextAI

Qt WebEngine is the Qt6 framework's Chromium-based web content rendering engine, used to embed browser-like functionality in Qt applications. Because Qt WebEngine wraps and exposes Chromium's rendering stack (including Blink and V8), vulnerabilities in this component class commonly involve memory safety issues, sandbox escapes, or JavaScript engine flaws inherited from upstream Chromium. The affected package is qt6-qtwebengine as distributed by Alpine Linux. No CWE root-cause classification, CPE string, or CVSS vector was provided in available intelligence, preventing identification of the specific vulnerability class or subsystem involved.

Affected ProductsAI

The confirmed affected product is qt6-qtwebengine as packaged by Alpine Linux, fixed at Alpine package version 6.9.1-r3. The specific Alpine Linux release branch(es) (e.g., edge, v3.21) requiring the update are not specified in available intelligence. No CPE string was provided. Upstream Qt6 versioning affected and whether other Linux distributions ship vulnerable Qt WebEngine builds is unknown from this data - consult the Alpine Linux security tracker and the Qt Project's own security advisories for broader scope.

RemediationAI

Alpine Linux users should update the qt6-qtwebengine package to version 6.9.1-r3 or later using the standard Alpine package manager: 'apk upgrade qt6-qtwebengine'. This is the vendor-released patch confirmed by the Alpine Linux vendor report. No workarounds, compensating controls, or side effects of the upgrade are described in available data. For applications embedding Qt WebEngine, restarting affected services or applications after the package update is standard practice. Users on other distributions should consult their respective vendor advisories, as patch availability outside Alpine Linux is not confirmed by available intelligence.