{"id":"CVE-2024-25580","aliases":["ALSA-2024:2276","ALSA-2024:3056","AZL-36915","AZL-38737","CLSA-2026-1778107793","DEBIAN-CVE-2024-25580","EUVD-2024-22908","GHSA-2952-j2hp-678j","MGASA-2025-0046","OESA-2024-1538","OESA-2024-2572","RHSA-2024:2276","RHSA-2024:3056","RLSA-2024:3056","UBUNTU-CVE-2024-25580","USN-7923-1","openSUSE-SU-2024:13690-1","openSUSE-SU-2024:13775-1"],"status":"published","title":"An issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.12, 6.3...","description":"An issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.12, 6.3.x through 6.5.x before 6.5.5, and 6.6.x before 6.6.2. A buffer overflow and application crash can occur via a crafted KTX image file.","severity":{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.00321,"percentile":0.25326,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-120"],"published":"2024-03-27T00:00:00Z","modified":"2026-11-02T12:01:01Z","fixes":[{"ecosystem":"Azure Linux:2","package":"qt5-qtbase","fixed_in":["5.12.11-15"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"qtbase","fixed_in":["6.6.2-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"qt6-base","fixed_in":["6.6.2+dfsg-8"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"qt6-base","fixed_in":["6.6.2+dfsg-8"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"qtbase-opensource-src","fixed_in":["5.15.8+dfsg-11+deb12u2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"qtbase-opensource-src","fixed_in":["5.15.10+dfsg-7"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"qtbase-opensource-src","fixed_in":["5.15.10+dfsg-7"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"qtbase-opensource-src-gles","fixed_in":["5.15.10+dfsg-5"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"qtbase-opensource-src-gles","fixed_in":["5.15.10+dfsg-5"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"qtbase-opensource-src","fixed_in":["5.12.8+dfsg-0ubuntu2.1+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"qtbase-opensource-src","fixed_in":["5.15.3+dfsg-2ubuntu0.2+esm2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"libqt5-qtbase","fixed_in":["5.15.12+kde151-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"qt6-base","fixed_in":["6.6.2-2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"qt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.9-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qt5-qtbase-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.9-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qt5-qtbase-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.9-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qt5-qtbase-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.9-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qt5-qtbase-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.9-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qt5-qtbase-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.9-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qt5-qtbase-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.9-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qt5-qtbase-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.9-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qt5-qtbase-private-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.9-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qt5-qtbase-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.9-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"qt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"qt5-qtbase-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"qt5-qtbase-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"qt5-qtbase-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"qt5-qtbase-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"qt5-qtbase-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"qt5-qtbase-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"qt5-qtbase-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"qt5-qtbase-private-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"qt5-qtbase-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Azure Linux:2","package":"qt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.12.11-15"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.2-1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"qt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-1.el9.tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"qt5-qtbase-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-1.el9.tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"qt5-qtbase-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-1.el9.tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"qt5-qtbase-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-1.el9.tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"qt5-qtbase-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-1.el9.tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"qt5-qtbase-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-1.el9.tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"qt5-qtbase-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-1.el9.tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"qt5-qtbase-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-1.el9.tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"qt5-qtbase-private-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-1.el9.tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"qt5-qtbase-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-1.el9.tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"qt5-qtbase-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-1.el9.tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"qt6-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.10.2+dfsg-1","6.10.2+dfsg-10","6.10.2+dfsg-10+hurd.1","6.10.2+dfsg-11","6.10.2+dfsg-12","6.10.2+dfsg-13","6.10.2+dfsg-14","6.10.2+dfsg-15","6.10.2+dfsg-16","6.10.2+dfsg-2","6.10.2+dfsg-3","6.10.2+dfsg-4","6.10.2+dfsg-5","6.10.2+dfsg-6","6.10.2+dfsg-7","6.10.2+dfsg-7+hurd.1","6.10.2+dfsg-8","6.10.2+dfsg-9","6.11.2+dfsg-1","6.11.2+dfsg-2","6.11.2+dfsg-3","6.11.2+dfsg-4","6.11.2+dfsg-5","6.11.2+dfsg-5+sparc64","6.11.2+dfsg-6","6.11.2+dfsg-7","6.4.2+dfsg-10","6.4.2+dfsg-11","6.4.2+dfsg-11~bpo11+1","6.4.2+dfsg-12","6.4.2+dfsg-13","6.4.2+dfsg-14","6.4.2+dfsg-15","6.4.2+dfsg-16","6.4.2+dfsg-17","6.4.2+dfsg-18","6.4.2+dfsg-18+loong64","6.4.2+dfsg-19","6.4.2+dfsg-20","6.4.2+dfsg-21","6.4.2+dfsg-21.1","6.6.0+dfsg-1","6.6.0+dfsg-2","6.6.0+dfsg-3","6.6.0+dfsg-4","6.6.0+dfsg-5","6.6.0+dfsg-6","6.6.1+dfsg-1","6.6.1+dfsg-2","6.6.1+dfsg-3","6.6.1+dfsg-4","6.6.1+dfsg-5","6.6.1+dfsg-6","6.6.2+dfsg-1","6.6.2+dfsg-10","6.6.2+dfsg-11","6.6.2+dfsg-12","6.6.2+dfsg-2","6.6.2+dfsg-3","6.6.2+dfsg-4","6.6.2+dfsg-5","6.6.2+dfsg-6","6.6.2+dfsg-7","6.6.2+dfsg-8","6.6.2+dfsg-9","6.7.2+dfsg-1","6.7.2+dfsg-2","6.7.2+dfsg-3","6.7.2+dfsg-4","6.7.2+dfsg-4+m68k","6.7.2+dfsg-5","6.7.2+dfsg-6","6.8.2+dfsg-1","6.8.2+dfsg-10","6.8.2+dfsg-10.1","6.8.2+dfsg-2","6.8.2+dfsg-3","6.8.2+dfsg-4","6.8.2+dfsg-5","6.8.2+dfsg-5+m68k","6.8.2+dfsg-6","6.8.2+dfsg-7","6.8.2+dfsg-8","6.8.2+dfsg-9","6.9.1+dfsg-1","6.9.1+dfsg-2","6.9.1+dfsg-3","6.9.1+dfsg-4","6.9.1+dfsg-5","6.9.2+dfsg-1","6.9.2+dfsg-2","6.9.2+dfsg-3","6.9.2+dfsg-4"]},{"source":"osv","ecosystem":"Debian:13","package":"qt6-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.2+dfsg-8"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"qt6-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.2+dfsg-8"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"qtbase-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.8+dfsg-11+deb12u2"}]}],"versions":["5.15.8+dfsg-11","5.15.8+dfsg-11+deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"qtbase-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.10+dfsg-7"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"qtbase-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.10+dfsg-7"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"qtbase-opensource-src-gles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.10+dfsg-1","5.15.10+dfsg-2","5.15.10+dfsg-3","5.15.10+dfsg-4","5.15.10+dfsg-5","5.15.10+dfsg-6","5.15.12+dfsg-1","5.15.13+dfsg-1","5.15.13+dfsg-2","5.15.15+dfsg-1","5.15.15+dfsg-2","5.15.17+dfsg-1","5.15.17+dfsg-2","5.15.18+dfsg-1","5.15.19+dfsg-1","5.15.19+dfsg-2","5.15.8+dfsg-3","5.15.9+dfsg-1"]},{"source":"osv","ecosystem":"Debian:13","package":"qtbase-opensource-src-gles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.10+dfsg-5"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"qtbase-opensource-src-gles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.10+dfsg-5"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"qtbase5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.7-6.1.mga9"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:9","package":"qtbase6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.1-5.1.mga9"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"qt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.2-16.oe2203sp3"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"qt6-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.2-8.oe2403"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-examples-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-gui-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-odbc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-private-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"qt5-qtbase-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"qt5-qtbase-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"qt5-qtbase-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"qt5-qtbase-examples-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"qt5-qtbase-gui-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"qt5-qtbase-mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"qt5-qtbase-odbc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"qt5-qtbase-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"qt5-qtbase-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"qt5-qtbase-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qt5-qtbase-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qt5-qtbase-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qt5-qtbase-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qt5-qtbase-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qt5-qtbase-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qt5-qtbase-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qt5-qtbase-examples-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qt5-qtbase-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qt5-qtbase-gui-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qt5-qtbase-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qt5-qtbase-mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qt5-qtbase-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qt5-qtbase-odbc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qt5-qtbase-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qt5-qtbase-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qt5-qtbase-private-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qt5-qtbase-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"qt5-qtbase-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"qt5-qtbase-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"qt5-qtbase-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"qt5-qtbase-examples-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"qt5-qtbase-gui-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"qt5-qtbase-mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"qt5-qtbase-odbc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"qt5-qtbase-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"qt5-qtbase-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"qt5-qtbase-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"qt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"qtbase-opensource-src-gles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.2+dfsg-2ubuntu9","5.5.1+dfsg-6ubuntu1","5.5.1+dfsg-10ubuntu1","5.5.1+dfsg-13ubuntu1","5.5.1+dfsg-13ubuntu2","5.5.1+dfsg-13ubuntu3","5.5.1+dfsg-14ubuntu1","5.5.1+dfsg-14ubuntu2","5.5.1+dfsg-14ubuntu3","5.5.1+dfsg-15ubuntu1","5.5.1+dfsg-16ubuntu1","5.5.1+dfsg-16ubuntu4","5.5.1+dfsg-16ubuntu5","5.5.1+dfsg-16ubuntu6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"qtbase-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.12.8+dfsg-0ubuntu2.1+esm2"}]}],"versions":["5.12.4+dfsg-4ubuntu1","5.12.5+dfsg-2","5.12.5+dfsg-8","5.12.5+dfsg-8build1","5.12.5+dfsg-9build1","5.12.8+dfsg-0ubuntu1","5.12.8+dfsg-0ubuntu2.1","5.12.8+dfsg-0ubuntu2.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"qtbase-opensource-src-gles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.12.4+dfsg-1build1","5.12.5+dfsg-1","5.12.5+dfsg-2","5.12.8+dfsg-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"qt6-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.2+dfsg-5ubuntu1","6.2.2+dfsg-6ubuntu1","6.2.2+dfsg-6ubuntu2","6.2.4+dfsg-1ubuntu1","6.2.4+dfsg-2ubuntu1","6.2.4+dfsg-2ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"qtbase-opensource-src-gles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.2+dfsg-4","5.15.2+dfsg-5","5.15.3+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"qtbase-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3+dfsg-2ubuntu0.2+esm2"}]}],"versions":["5.15.2+dfsg-12","5.15.2+dfsg-13","5.15.2+dfsg-14","5.15.2+dfsg-14ubuntu1","5.15.2+dfsg-14ubuntu3","5.15.2+dfsg-15","5.15.3+dfsg-1","5.15.3+dfsg-2","5.15.3+dfsg-2ubuntu0.1","5.15.3+dfsg-2ubuntu0.2","5.15.3+dfsg-2ubuntu0.2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"qt6-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.4.2+dfsg-18","6.4.2+dfsg-19","6.4.2+dfsg-19build1","6.4.2+dfsg-20","6.4.2+dfsg-21","6.4.2+dfsg-21.1build4","6.4.2+dfsg-21.1build5"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"qtbase-opensource-src-gles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.10+dfsg-2","5.15.10+dfsg-3","5.15.12+dfsg-1","5.15.12+dfsg-1ubuntu1","5.15.12+dfsg-1ubuntu2","5.15.13+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"qt6-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.3+dfsg-0ubuntu2","6.8.3+dfsg-0ubuntu3","6.9.2+dfsg-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"qtbase-opensource-src-gles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.15+dfsg-2","5.15.17+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"qt6-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.10.2+dfsg-7","6.10.2+dfsg-14ubuntu2","6.10.2+dfsg-15","6.10.2+dfsg-16","6.11.2+dfsg-4ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"qtbase-opensource-src-gles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.18+dfsg-1","5.15.19+dfsg-2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"qt6-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.9.2+dfsg-1ubuntu1","6.9.2+dfsg-2","6.9.2+dfsg-3ubuntu1","6.9.2+dfsg-3ubuntu2","6.9.2+dfsg-4","6.10.2+dfsg-3","6.10.2+dfsg-6","6.10.2+dfsg-7"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"qtbase-opensource-src-gles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.17+dfsg-1","5.15.17+dfsg-2","5.15.18+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"qtbase-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.12.8+dfsg-0ubuntu2.1+esm2"}]}],"versions":["5.12.4+dfsg-4ubuntu1","5.12.5+dfsg-2","5.12.5+dfsg-8","5.12.5+dfsg-8build1","5.12.5+dfsg-9build1","5.12.8+dfsg-0ubuntu1","5.12.8+dfsg-0ubuntu2.1","5.12.8+dfsg-0ubuntu2.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"qtbase-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3+dfsg-2ubuntu0.2+esm2"}]}],"versions":["5.15.2+dfsg-12","5.15.2+dfsg-13","5.15.2+dfsg-14","5.15.2+dfsg-14ubuntu1","5.15.2+dfsg-14ubuntu3","5.15.2+dfsg-15","5.15.3+dfsg-1","5.15.3+dfsg-2","5.15.3+dfsg-2ubuntu0.1","5.15.3+dfsg-2ubuntu0.2","5.15.3+dfsg-2ubuntu0.2+esm1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libqt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.12+kde151-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"qt6-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.2-2.1"}]}]}],"products":[{"vendor":"qt","product":"qt"}],"references":[{"url":"https://www.qt.io/blog/security-advisory-potential-buffer-overflow-when-reading-ktx-images","tags":["x_transferred","Patch","Vendor Advisory","advisory","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZWTGLKC3WBDHZ5OJRSEB2QUR7XXZDLZV/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SYE2NMN67DYHYJKLAKLGR64OYI7A63AH/","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-25580","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SYE2NMN67DYHYJKLAKLGR64OYI7A63AH"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZWTGLKC3WBDHZ5OJRSEB2QUR7XXZDLZV"},{"url":"https://github.com/advisories/GHSA-2952-j2hp-678j"},{"url":"https://access.redhat.com/errata/RHSA-2024:2276","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-51714","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-25580","tags":["report"]},{"url":"https://bugzilla.redhat.com/2255856","tags":["report"]},{"url":"https://bugzilla.redhat.com/2264423","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-2276.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:3056","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-3056.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1778107793.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/25xxx/CVE-2024-25580.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-25580","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0046.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33159","tags":["report"]},{"url":"https://lwn.net/Articles/971686/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KVCBTKX6LVBTP6UEJQZ2PENI2KATSRJK/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1538","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45935","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2572","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-33861","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-39936","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255856","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2264423","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2276.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-51714","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-51714","tags":["advisory"]},{"url":"https://codereview.qt-project.org/c/qt/qtbase/+/524864","tags":["article"]},{"url":"https://codereview.qt-project.org/c/qt/qtbase/+/524865/3","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-25580","tags":["advisory","report"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.10_release_notes/index","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3056.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:3056","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-25580","tags":["report"]},{"url":"https://code.qt.io/cgit/qt/qtbase.git/commit/?id=28ecb523ce8490bff38b251b3df703c72e057519","tags":["report"]},{"url":"https://code.qt.io/cgit/qt/qtbase.git/commit/?id=dec1863c7dc63e5788b0c6c061d36e856a6ae2b2","tags":["report"]},{"url":"https://download.qt.io/official_releases/qt/5.15/CVE-2024-25580-qtbase-5.15.diff","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7923-1","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2024-25580","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2024-25580","description":"An issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.12, 6.3.x through 6.5.x before 6.5.5, and 6.6.x before 6.6.2. A buffer overflow and application crash can occur via a crafted KTX image file.","status":"published","published":"2024-03-27T00:00:00Z","modified":"2025-11-04T18:29:36.74Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:34:04.341725Z"}],"euvd":[{"id":"EUVD-2024-22908","description":"An issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.12, 6.3.x through 6.5.x before 6.5.5, and 6.6.x before 6.6.2. A buffer overflow and application crash can occur via a crafted KTX image file.","status":"published","published":"2024-03-27T00:00:00Z","modified":"2025-11-04T18:29:36Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T19:49:23.723839Z"}],"ghsa":[{"id":"GHSA-2952-j2hp-678j","title":"An issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.12, 6.3...","description":"An issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.12, 6.3.x through 6.5.x before 6.5.5, and 6.6.x before 6.6.2. A buffer overflow and application crash can occur via a crafted KTX image file.","status":"published","published":"2024-03-27T03:31:17Z","modified":"2025-11-04T21:31:22Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T15:04:36.536202Z"}],"nvd":[{"id":"CVE-2024-25580","description":"An issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.12, 6.3.x through 6.5.x before 6.5.5, and 6.6.x before 6.6.2. A buffer overflow and application crash can occur via a crafted KTX image file.","status":"published","published":"2024-03-27T03:15:12.007Z","modified":"2026-06-17T07:16:12.8Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:09:43.052376Z"}],"osv":[{"id":"CVE-2024-25580","description":"An issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.12, 6.3.x through 6.5.x before 6.5.5, and 6.6.x before 6.6.2. A buffer overflow and application crash can occur via a crafted KTX image file.","status":"published","published":"2024-03-27T00:00:00Z","modified":"2026-10-28T10:36:23.291235211Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:38.897406Z"},{"id":"DEBIAN-CVE-2024-25580","description":"An issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.12, 6.3.x through 6.5.x before 6.5.5, and 6.6.x before 6.6.2. A buffer overflow and application crash can occur via a crafted KTX image file.","status":"published","published":"2024-03-27T03:15:12.007Z","modified":"2026-11-02T12:01:01.568039Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:41.849198Z"},{"id":"OESA-2024-1538","title":"qt5-qtbase security update","description":"This package provides base tools, such as string, xml, and network handling.\r\n\r\nSecurity Fix(es):\r\n\r\nQt 6 through 6.6 was discovered to contain a NULL pointer dereference via the function QXcbConnection::initializeAllAtoms(). NOTE: this is disputed because it is not expected that an X application should continue to run when there is arbitrary anomalous behavior from the X server.(CVE-2023-45935)\r\n\r\nAn issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.12, 6.3.x through 6.5.x before 6.5.5, and 6.6.x before 6.6.2. A buffer overflow and application crash can occur via a crafted KTX image file.(CVE-2024-25580)","status":"published","published":"2024-05-10T11:06:59Z","modified":"2026-08-18T01:18:25.307309427Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"OESA-2024-2572","title":"qt6-qtbase security update","description":"Qt is a software toolkit for developing applications.\r\n\r\nSecurity Fix(es):\r\n\r\n(CVE-2023-45935)\r\n\r\n(CVE-2024-25580)\r\n\r\n(CVE-2024-33861)\r\n\r\n(CVE-2024-39936)","status":"published","published":"2024-12-20T11:08:03Z","modified":"2026-08-18T01:17:43.985132821Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"RHSA-2024:2276","title":"Red Hat Security Advisory: qt5-qtbase security update","status":"published","published":"2024-09-16T16:40:15Z","modified":"2026-06-26T12:22:38.316646535Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:3056","title":"Red Hat Security Advisory: qt5-qtbase security update","status":"published","published":"2024-09-16T16:40:25Z","modified":"2026-06-26T12:22:32.078325676Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RLSA-2024:3056","title":"Moderate: qt5-qtbase security update","description":"Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. \n\nSecurity Fix(es):\n\n* qt: incorrect integer overflow check (CVE-2023-51714)\n\n* qtbase: potential buffer overflow when reading KTX images (CVE-2024-25580)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section.","status":"published","published":"2025-05-07T19:11:47.341314Z","modified":"2025-05-07T20:08:45.435465Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"UBUNTU-CVE-2024-25580","description":"An issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.12, 6.3.x through 6.5.x before 6.5.5, and 6.6.x before 6.6.2. A buffer overflow and application crash can occur via a crafted KTX image file.","status":"published","published":"2024-03-27T03:15:00Z","modified":"2026-10-17T12:56:33.38582762Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:54:42.68848Z"},{"id":"ALSA-2024:2276","title":"Moderate: qt5-qtbase security update","description":"Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. \n\nSecurity Fix(es):\n\n* qt: incorrect integer overflow check (CVE-2023-51714)\n* qtbase: potential buffer overflow when reading KTX images (CVE-2024-25580)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2024-04-30T00:00:00Z","modified":"2026-10-29T11:31:08.362695225Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:3056","title":"Moderate: qt5-qtbase security update","description":"Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. \n\nSecurity Fix(es):\n\n* qt: incorrect integer overflow check (CVE-2023-51714)\n* qtbase: potential buffer overflow when reading KTX images (CVE-2024-25580)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2024-05-22T00:00:00Z","modified":"2026-10-29T11:02:20.819862697Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"AZL-36915","title":"CVE-2024-25580 affecting package qt5-qtbase for versions less than 5.12.11-15","description":"An issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.12, 6.3.x through 6.5.x before 6.5.5, and 6.6.x before 6.6.2. A buffer overflow and application crash can occur via a crafted KTX image file.","status":"published","published":"2024-03-27T03:15:12Z","modified":"2026-04-21T04:25:17.646345Z","updated_at":"2026-11-02T15:28:04.173658Z"},{"id":"AZL-38737","title":"CVE-2024-25580 affecting package qtbase for versions less than 6.6.2-1","description":"An issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.12, 6.3.x through 6.5.x before 6.5.5, and 6.6.x before 6.6.2. A buffer overflow and application crash can occur via a crafted KTX image file.","status":"published","published":"2024-03-27T03:15:12Z","modified":"2026-04-21T04:47:52.062555Z","updated_at":"2026-11-02T15:28:04.608733Z"},{"id":"CLSA-2026-1778107793","title":"qt5-qtbase: Fix of 3 CVEs","description":"- CVE-2025-5455: fix qDecodeDataUrl crash on malformed data URL with charset\n- CVE-2024-25580: fix KTX file reading buffer overflow\n- CVE-2024-39936: delay HTTP/2 communication until encrypted() can be\n  responded to (includes prerequisite to emit encrypted() on H2 path)","status":"published","published":"2026-05-06T22:50:01Z","modified":"2026-10-21T10:45:56.312701445Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"MGASA-2025-0046","title":"Updated qtbase5 \u0026 qtbase6 packages fix security vulnerabilities","description":"network/access/http2/hpacktable.cpp has an incorrect HPack integer\noverflow check. (CVE-2023-51714)\nA buffer overflow and application crash can occur via a crafted KTX\nimage file. (CVE-2024-25580)\nCode to make security-relevant decisions about an established connection\nmay execute too early, because the encrypted() signal has not yet been\nemitted and processed. (CVE-2024-39936)\n","status":"published","published":"2025-02-09T00:19:43Z","modified":"2026-04-16T04:43:55.102911078Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:13690-1","title":"libQt5Bootstrap-devel-static-32bit-5.15.12+kde151-1.1 on GA media","description":"These are all security issues fixed in the libQt5Bootstrap-devel-static-32bit-5.15.12+kde151-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:33:38.375955Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"openSUSE-SU-2024:13775-1","title":"libQt6Concurrent6-6.6.2-2.1 on GA media","description":"These are all security issues fixed in the libQt6Concurrent6-6.6.2-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:15:55.522797Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"USN-7923-1","title":"qtbase-opensource-src vulnerability","description":"It was discovered that Qt did not correctly handle certain memory\noperations. If a user or automated system were tricked into opening a\nspecially crafted file, an attacker could possibly use this issue to\ncause a denial of service or execute arbitrary code.","status":"published","published":"2025-12-11T04:18:33Z","modified":"2026-04-27T18:31:25.960046Z","updated_at":"2026-11-02T16:58:21.91885Z"}]}}