EUVD-2025-16968

| CVE-2025-5683 MEDIUM
2025-06-05 a59d8014-47c4-4630-ab43-e1b13cbe58e3
5.5
CVSS 3.1
Share

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

4
Analysis Generated
Mar 14, 2026 - 17:53 vuln.today
EUVD ID Assigned
Mar 14, 2026 - 17:53 euvd
EUVD-2025-16968
Patch Released
Mar 14, 2026 - 17:53 nvd
Patch available
CVE Published
Jun 05, 2025 - 06:15 nvd
MEDIUM 5.5

Tags

Denial Of Service Ubuntu Debian Qt Redhat Suse

Description

When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.

Analysis

When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.

Technical Context

A denial of service vulnerability allows an attacker to disrupt the normal functioning of a system, making it unavailable to legitimate users. This vulnerability is classified as Allocation of Resources Without Limits or Throttling (CWE-770).

Affected Products

Affected products: Qt Qt

Remediation

A vendor patch is available — apply it immediately. Implement rate limiting and input validation. Use timeout mechanisms for resource-intensive operations. Deploy DDoS protection where applicable.

Priority Score

28
Low Medium High Critical
KEV: 0
EPSS: +0.0
CVSS: +28
POC: 0

Vendor Status

Ubuntu

Priority: Medium
qt6-imageformats
Release Status Version
jammy needs-triage -
noble needs-triage -
upstream needs-triage -
plucky ignored end of life, was needs-triage
oracular ignored end of life, was needs-triage
questing needs-triage -
qtimageformats-opensource-src
Release Status Version
xenial needs-triage -
bionic needs-triage -
focal needs-triage -
jammy needs-triage -
noble needs-triage -
upstream needs-triage -
plucky ignored end of life, was needs-triage
oracular ignored end of life, was needs-triage
questing needs-triage -

Debian

Bug #1107317
qt6-imageformats
Release Status Fixed Version Urgency
bookworm vulnerable 6.4.2-1 -
trixie fixed 6.8.2-4 -
forky, sid fixed 6.9.2-3 -
(unstable) fixed 6.8.2-4 -
qtimageformats-opensource-src
Release Status Fixed Version Urgency
bullseye vulnerable 5.15.2-2 -
bookworm vulnerable 5.15.8-2 -
trixie fixed 5.15.15-4 -
forky, sid fixed 5.15.17-2 -
(unstable) fixed 5.15.15-4 -

Share

EUVD-2025-16968 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy