qt6-qtwebengine CVE-2025-8010

MEDIUM

N/A vendor:alpine

Information Disclosure

Lifecycle Timeline

Analysis Generated

May 27, 2026 - 22:33 vuln.today

DescriptionCVE.org

Alpine Linux: qt6-qtwebengine fixed in 6.9.1-r3

AnalysisAI

qt6-qtwebengine on Alpine Linux was patched in package revision 6.9.1-r3, addressing an unspecified vulnerability in the Qt 6 WebEngine component - a Chromium-based web rendering engine embedded in Qt applications. The underlying vulnerability type, root cause, and precise impact are not disclosed in available intelligence; the Alpine Linux vendor advisory provides only the fix version without a description of the flaw. No public exploit or CISA KEV listing has been identified at time of analysis.

Technical ContextAI

Qt WebEngine (qt6-qtwebengine) is the Qt 6 implementation of a Chromium-based web content rendering engine, enabling Qt applications to embed and render web content. It inherits Chromium's attack surface, which historically includes memory corruption, sandbox escapes, type confusion, and JavaScript engine vulnerabilities. The affected package is the Alpine Linux distribution packaging of upstream Qt 6.9.1. No CWE is provided, so the root cause class cannot be confirmed. No CPE strings are supplied in the intelligence data, though the package aligns with the Alpine Linux ecosystem and Qt Project upstream. The absence of CVSS and CWE data significantly limits technical characterization.

Affected ProductsAI

The affected product is qt6-qtwebengine as packaged for Alpine Linux. The fix was introduced in Alpine package version 6.9.1-r3, where 6.9.1 reflects the upstream Qt version and -r3 is Alpine's package revision. All Alpine Linux installations running qt6-qtwebengine versions prior to 6.9.1-r3 should be considered potentially affected. No CPE identifiers, specific Alpine release branches (e.g., edge, v3.x), or upstream Qt version ranges are confirmed in the available intelligence. Consult the Alpine Linux package tracker for branch-specific advisories.

RemediationAI

Upgrade the qt6-qtwebengine package to version 6.9.1-r3 or later on Alpine Linux using the standard package manager: 'apk upgrade qt6-qtwebengine'. This is the vendor-confirmed fix per Alpine Linux reporting. No workarounds or compensating controls are documented in available data. If upgrading immediately is not feasible and the application using qt6-qtwebengine processes untrusted web content, consider restricting or disabling the web rendering functionality within the affected application until patching is possible, though the trade-off is loss of embedded web content features. No upstream Qt advisory URL is available in the provided intelligence; consult the Alpine Linux security tracker and the Qt Project security advisories directly for additional guidance.