CVE-2025-23050

QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to...

3.1 LowFix available

QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read (or division by zero). This is fixed in 5.15.19, 6.5.9, and 6.8.2.

Attack profile

How easy it is to exploit

Attack vector: Adjacent network
Complexity: High
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: Low

Exploit likelihood

0.19%Up 0.2 points since Oct 31, 2025

What each source reports

CVE List Score used 3.1

QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read (or division by zero). This is fixed in 5.15.19, 6.5.9, and 6.8.2.

Record: CVE-2025-23050
CVSS 3.1: 3.1 LowCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness: CWE-125
Updated: 2026-11-02

EUVDEUVD-2025-37272 3.1

QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read (or division by zero). This is fixed in 5.15.19, 6.5.9, and 6.8.2.

Record: EUVD-2025-37272
CVSS 3.1: 3.1 LowCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

GitHub AdvisoriesGHSA-pj6p-fx56-wq5h 3.1

QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to...

QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read (or division by zero). This is fixed in 5.15.19, 6.5.9, and 6.8.2.

Record: GHSA-pj6p-fx56-wq5h
CVSS 3.1: 3.1 LowCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness: CWE-125
Updated: 2026-11-02

NVD 3.1

QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read (or division by zero). This is fixed in 5.15.19, 6.5.9, and 6.8.2.

Record: CVE-2025-23050
CVSS 3.1: 3.1 LowCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness: CWE-125
Updated: 2026-11-02

OSVDEBIAN-CVE-2025-23050 3.1

QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read (or division by zero). This is fixed in 5.15.19, 6.5.9, and 6.8.2.

Record: DEBIAN-CVE-2025-23050
CVSS 3.1: 3.1 LowCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVOESA-2025-1087 9.1

qt5-qtconnectivity security update

This package provides features as Dial-up, (W)LAN, USB and VPN support.

Security Fix(es):

(CVE-2025-23050)

Record: OESA-2025-1087
CVSS 3.1: 9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

Show 7 moreShow less

OSVOESA-2025-1088 9.1

qt6-qtconnectivity security update

Security Fix(es):

(CVE-2025-23050)

Record: OESA-2025-1088
CVSS 3.1: 9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVOESA-2025-1089 9.1

qt6-qtconnectivity security update

Security Fix(es):

(CVE-2025-23050)

Record: OESA-2025-1089
CVSS 3.1: 9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2025-23050 3.1

QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read (or division by zero). This is fixed in 5.15.19, 6.5.9, and 6.8.2.

Record: UBUNTU-CVE-2025-23050
CVSS 3.1: 3.1 LowCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVAZL-69557 No score

CVE-2025-23050 affecting package qt5-qtconnectivity 5.14.2-2

QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read (or division by zero). This is fixed in 5.15.19, 6.5.9, and 6.8.2.

Record: AZL-69557
Updated: 2026-11-02

OSVopenSUSE-SU-2025:0033-1 No score

Security update for qt6-connectivity

This update for qt6-connectivity fixes the following issues:

CVE-2025-23050: Fixed buffer over-read and division by zero (boo#1236237)

Record: openSUSE-SU-2025:0033-1
Updated: 2026-11-02

OSVopenSUSE-SU-2025:14692-1 No score

libQt6Bluetooth6-6.8.1-2.1 on GA media

These are all security issues fixed in the libQt6Bluetooth6-6.8.1-2.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2025:14692-1
Updated: 2026-11-02

OSVopenSUSE-SU-2025:14716-1 No score

libQt5Bluetooth5-32bit-5.15.16+kde2-1.1 on GA media

These are all security issues fixed in the libQt5Bluetooth5-32bit-5.15.16+kde2-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2025:14716-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`qt5-qtconnectivity` Azure Linux:2	through 5.14.2-2	None known
`qt6-connectivity` Debian:12	All versions, plus listed versions 6.10.2-16.10.2-26.10.2-36.11.2-16.11.2-2 Show 29 moreShow less 6.4.2-16.4.2-26.4.2-36.4.2-46.4.2-56.6.0-16.6.0-26.6.0-36.6.1-16.6.1-26.6.2-16.6.2-26.7.2-16.7.2-26.7.2-36.7.2-46.7.2-56.7.2-66.7.2-76.7.2-86.8.2-16.8.2-26.8.2-36.9.1-16.9.1-26.9.2-16.9.2-26.9.2-36.9.2-4	None known
`qt6-connectivity` Debian:13	before 6.7.2-8	6.7.2-8
`qt6-connectivity` Debian:14	before 6.7.2-8	6.7.2-8
`qtconnectivity-opensource-src` Debian:12	All versions, plus listed versions 5.15.10-15.15.10-25.15.12-15.15.13-15.15.13-2 Show 10 moreShow less 5.15.15-15.15.15-25.15.15-35.15.17-15.15.17-25.15.18-15.15.19-15.15.19-25.15.8-25.15.9-1	None known
`qtconnectivity-opensource-src` Debian:13	before 5.15.15-3	5.15.15-3
`qt5-qtconnectivity` openEuler:20.03-LTS-SP4	before 5.11.1-5.oe2003sp4	5.11.1-5.oe2003sp4
`qt5-qtconnectivity` openEuler:22.03-LTS-SP3	before 5.15.2-2.oe2203sp3	5.15.2-2.oe2203sp3
`qt5-qtconnectivity` openEuler:22.03-LTS-SP4	before 5.15.2-2.oe2203sp4	5.15.2-2.oe2203sp4
`qt5-qtconnectivity` openEuler:24.03-LTS	before 5.15.10-2.oe2403sp1	5.15.10-2.oe2403sp1

Show 17 moreShow less

Affected packages
Package	Affected	Fixed
`qt5-qtconnectivity` openEuler:24.03-LTS-SP1	before 5.15.10-2.oe2403sp1	5.15.10-2.oe2403sp1
`qt6-qtconnectivity` openEuler:24.03-LTS	before 6.5.2-3.oe2403	6.5.2-3.oe2403
`qt6-qtconnectivity` openEuler:24.03-LTS-SP1	before 6.5.2-3.oe2403sp1	6.5.2-3.oe2403sp1
`qtconnectivity-opensource-src` Ubuntu:16.04:LTS	All versions, plus listed versions 5.4.2-2build15.5.1-2build1	None known
`qtconnectivity-opensource-src` Ubuntu:18.04:LTS	All versions, plus listed versions 5.9.1-25.9.2-2build15.9.3-0ubuntu15.9.4-0ubuntu15.9.5-0ubuntu1	None known
`qtconnectivity-opensource-src` Ubuntu:20.04:LTS	All versions, plus listed versions 5.12.4-15.12.5-15.12.5-1build15.12.8-0ubuntu1	None known
`qt6-connectivity` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.2-26.2.4-1	None known
`qtconnectivity-opensource-src` Ubuntu:22.04:LTS	All versions, plus listed versions 5.15.2-25.15.3-1	None known
`qt6-connectivity` Ubuntu:24.04:LTS	All versions, plus listed versions 6.4.2-46.4.2-56.4.2-5build16.4.2-5build2	None known
`qtconnectivity-opensource-src` Ubuntu:24.04:LTS	All versions, plus listed versions 5.15.10-25.15.12-15.15.12-1build15.15.12-1build25.15.13-1	None known
`qtconnectivity-opensource-src` Ubuntu:25.10	All versions, plus listed versions 5.15.17-1	None known
`qt6-connectivity` SUSE:Package Hub 15 SP6	before 6.6.3-bp156.2.3.1	6.6.3-bp156.2.3.1
`qt6-connectivity-docs` SUSE:Package Hub 15 SP6	before 6.6.3-bp156.2.3.1	6.6.3-bp156.2.3.1
`qt6-connectivity` openSUSE:Leap 15.6	before 6.6.3-bp156.2.3.1	6.6.3-bp156.2.3.1
`qt6-connectivity-docs` openSUSE:Leap 15.6	before 6.6.3-bp156.2.3.1	6.6.3-bp156.2.3.1
`qt6-connectivity` openSUSE:Tumbleweed	before 6.8.1-2.1	6.8.1-2.1
`libqt5-qtconnectivity` openSUSE:Tumbleweed	before 5.15.16+kde2-1.1	5.15.16+kde2-1.1

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-23050 is a low vulnerability (CVSS 3.1) in Qt, published January 23, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.19%, the 8th percentile. Fixed in qt6-connectivity 6.7.2-8.

References

Show 11 moreShow less