Every CVE Search/ Get API key

CVE-2025-5683

When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash...

5.1 MediumFix available

When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. 

This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Active

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
Low

Exploit likelihood

0.24%Up 0.2 points since Jun 5, 2025
90%50%10%1%

What each source reports

CVE List Score used 5.1

When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. 

This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.

Record
CVE-2025-5683
CVSS 4.0
5.1 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L
Weakness
CWE-770
Updated
2026-11-02
EUVDEUVD-2025-16968 5.1

When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. 

This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.

Record
EUVD-2025-16968
CVSS 4.0
5.1 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L
Updated
2026-11-02
GitHub AdvisoriesGHSA-5mw2-w8pc-m6p6 5.1

When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash...

When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.

Record
GHSA-5mw2-w8pc-m6p6
CVSS 4.0
5.1 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-770
Updated
2026-11-02
NVD 5.1

When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. 

This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.

Record
CVE-2025-5683
CVSS 4.0
5.1 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-770
Updated
2026-11-02
OSV 5.5

When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. 

This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.

Record
CVE-2025-5683
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2025-5683 5.5

When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash.  This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.

Record
DEBIAN-CVE-2025-5683
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 11 moreShow less
OSVOESA-2025-1708 7.5

qt6-qtimageformats security update

Security Fix(es):

When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.(CVE-2025-5683)

Record
OESA-2025-1708
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-1709 7.5

qt6-qtimageformats security update

Security Fix(es):

When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.(CVE-2025-5683)

Record
OESA-2025-1709
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-1794 7.5

qt6-qtimageformats security update

Security Fix(es):

When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.(CVE-2025-5683)

Record
OESA-2025-1794
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-2492 5.5

qt5-qtimageformats security update

The core Qt Gui library by default supports reading and writing image files of the most common file formats: PNG, JPEG, BMP, GIF and a few more, ref. Reading and Writing Image Files. The Qt Image Formats add-on module provides optional support for other image file formats.

Security Fix(es):

When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.(CVE-2025-5683)

Record
OESA-2025-2492
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-2493 5.5

qt5-qtimageformats security update

The core Qt Gui library by default supports reading and writing image files of the most common file formats: PNG, JPEG, BMP, GIF and a few more, ref. Reading and Writing Image Files. The Qt Image Formats add-on module provides optional support for other image file formats.

Security Fix(es):

When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.(CVE-2025-5683)

Record
OESA-2025-2493
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-2494 5.5

qt5-qtimageformats security update

The core Qt Gui library by default supports reading and writing image files of the most common file formats: PNG, JPEG, BMP, GIF and a few more, ref. Reading and Writing Image Files. The Qt Image Formats add-on module provides optional support for other image file formats.

Security Fix(es):

When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.(CVE-2025-5683)

Record
OESA-2025-2494
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-2495 5.5

qt5-qtimageformats security update

The core Qt Gui library by default supports reading and writing image files of the most common file formats: PNG, JPEG, BMP, GIF and a few more, ref. Reading and Writing Image Files. The Qt Image Formats add-on module provides optional support for other image file formats.

Security Fix(es):

When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.(CVE-2025-5683)

Record
OESA-2025-2495
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-2496 5.5

qt5-qtimageformats security update

The core Qt Gui library by default supports reading and writing image files of the most common file formats: PNG, JPEG, BMP, GIF and a few more, ref. Reading and Writing Image Files. The Qt Image Formats add-on module provides optional support for other image file formats.

Security Fix(es):

When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.(CVE-2025-5683)

Record
OESA-2025-2496
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-2581 5.5

qt5-qtimageformats security update

The core Qt Gui library by default supports reading and writing image files of the most common file formats: PNG, JPEG, BMP, GIF and a few more, ref. Reading and Writing Image Files. The Qt Image Formats add-on module provides optional support for other image file formats.

Security Fix(es):

When loading a specifically crafted ICNS format image file in QImage, it will trigger a crash. This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, and 6.9.0. This is fixed in 6.5.10, 6.8.5, and 6.9.1.(CVE-2025-5683)

Record
OESA-2025-2581
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2025-5683 5.1

When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.

Record
UBUNTU-CVE-2025-5683
CVSS 4.0
5.1 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVMGASA-2025-0208 No score

Updated qtimageformats6 packages fix security vulnerabilities

Loading a specifically-crafted ICNS format image file in QImage will trigger a crash. This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0.

Record
MGASA-2025-0208
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
qt6-imageformats
Debian:12
 All versions, plus listed versions
6.10.2-16.10.2-26.10.2-36.11.2-16.4.2-1
Show 19 moreShow less
6.4.2-26.4.2-36.4.2-46.4.2-56.6.0-16.6.1-16.6.2-16.6.2-26.7.2-16.7.2-26.8.2-16.8.2-26.8.2-36.8.2-46.9.1-16.9.1-26.9.2-16.9.2-26.9.2-3
 None known
qt6-imageformats
Debian:13
 before 6.8.2-4
6.8.2-4
qt6-imageformats
Debian:14
 before 6.8.2-4
6.8.2-4
qtimageformats-opensource-src
Debian:12
 All versions, plus listed versions
5.15.10-15.15.10-25.15.12-15.15.13-15.15.13-2
Show 11 moreShow less
5.15.15-15.15.15-25.15.15-35.15.15-45.15.17-15.15.17-25.15.18-15.15.19-15.15.19-25.15.8-25.15.9-1
 None known
qtimageformats-opensource-src
Debian:13
 before 5.15.15-4
5.15.15-4
qtimageformats-opensource-src
Debian:14
 before 5.15.15-4
5.15.15-4
qtimageformats6
Mageia:9
 before 6.4.1-1.1.mga9
6.4.1-1.1.mga9
qt6-qtimageformats
openEuler:24.03-LTS-SP1
 before 6.5.2-2.oe2403sp1
6.5.2-2.oe2403sp1
qt6-qtimageformats
openEuler:24.03-LTS
 before 6.5.2-2.oe2403
6.5.2-2.oe2403
qt6-qtimageformats
openEuler:24.03-LTS-SP2
 before 6.5.2-2.oe2403sp2
6.5.2-2.oe2403sp2
Show 19 moreShow less
Affected packages
PackageAffectedFixed
qt5-qtimageformats
openEuler:24.03-LTS-SP1
 before 5.15.10-2.oe2403sp1
5.15.10-2.oe2403sp1
qt5-qtimageformats
openEuler:20.03-LTS-SP4
 before 5.11.1-8.oe2003sp4
5.11.1-8.oe2003sp4
qt5-qtimageformats
openEuler:22.03-LTS-SP3
 before 5.15.2-2.oe2203sp3
5.15.2-2.oe2203sp3
qt5-qtimageformats
openEuler:22.03-LTS-SP4
 before 5.15.2-2.oe2203sp4
5.15.2-2.oe2203sp4
qt5-qtimageformats
openEuler:24.03-LTS
 before 5.15.10-2.oe2403
5.15.10-2.oe2403
qt5-qtimageformats
openEuler:24.03-LTS-SP2
 before 5.15.10-2.oe2403sp2
5.15.10-2.oe2403sp2
qtimageformats-opensource-src
Ubuntu:16.04:LTS
 All versions, plus listed versions
5.4.2-2build15.5.1-2build1
 None known
qtimageformats-opensource-src
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.9.1-15.9.2-15.9.2-25.9.3-1ubuntu15.9.4-0ubuntu15.9.5-0ubuntu1
 None known
qtimageformats-opensource-src
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.12.4-15.12.5-15.12.5-1build15.12.8-0ubuntu1
 None known
qt6-imageformats
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.2-26.2.4-1
 None known
qtimageformats-opensource-src
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.2-25.15.2-2build15.15.3-1
 None known
qt6-imageformats
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.4.2-46.4.2-56.4.2-5build16.4.2-5build2
 None known
qtimageformats-opensource-src
Ubuntu:24.04:LTS
 All versions, plus listed versions
5.15.10-25.15.12-15.15.12-1build15.15.12-1build25.15.13-1
 None known
qt6-imageformats
Ubuntu:25.10
 All versions, plus listed versions
6.8.3-0ubuntu16.9.2-1
 None known
qtimageformats-opensource-src
Ubuntu:25.10
 All versions, plus listed versions
5.15.15-35.15.15-45.15.17-1
 None known
qt6-imageformats
Ubuntu:26.10
 All versions, plus listed versions
6.10.2-16.10.2-36.11.2-1
 None known
qtimageformats-opensource-src
Ubuntu:26.10
 All versions, plus listed versions
5.15.18-15.15.19-2
 None known
qt6-imageformats
Ubuntu:26.04:LTS
 All versions, plus listed versions
6.9.2-16.9.2-36.10.2-1
 None known
qtimageformats-opensource-src
Ubuntu:26.04:LTS
 All versions, plus listed versions
5.15.17-15.15.17-25.15.18-1
 None known

History

History
RecordedChangedSources
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-5683 is a medium vulnerability (CVSS 5.1) in Qt, published June 5, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.24%, the 15th percentile. Fixed in qt6-imageformats 6.8.2-4.

References

Show 14 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open