{"id":"CVE-2025-12385","aliases":["ALSA-2026:96075","AZL-71555","AZL-71647","DEBIAN-CVE-2025-12385","EUVD-2025-201103","GHSA-x9vj-67g7-457m","OESA-2025-2844","OESA-2025-2845","OESA-2025-2846","OESA-2025-2870","OESA-2025-2871","OESA-2025-2872","OESA-2025-2873","OESA-2025-2874","RLSA-2026:96075","UBUNTU-CVE-2025-12385","USN-8357-1"],"status":"published","title":"Improper validation of \u003cimg\u003e tag size in Text component parser","description":"Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation.\n\n\nThis issue affects users of the Text component in Qt Quick. Missing validation of the width and height in the \u003cimg\u003e tag could cause an application to become unresponsive.\n\n\n\nThis issue affects Qt: from 5.0.0 through 6.5.10, from 6.6.0 through 6.8.5, from 6.9.0 through 6.10.0.","severity":{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00338,"percentile":0.27423,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-1284","CWE-770"],"published":"2025-12-03T19:38:53Z","modified":"2026-11-10T12:30:02Z","fixes":[{"ecosystem":"AlmaLinux:8","package":"qt5-qtdeclarative","fixed_in":["5.15.3-3.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"qt5-qtdeclarative-devel","fixed_in":["5.15.3-3.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"qt5-qtdeclarative-examples","fixed_in":["5.15.3-3.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"qt5-qtdeclarative-static","fixed_in":["5.15.3-3.el8_10"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"qtdeclarative","fixed_in":["6.6.1-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"qtdeclarative-opensource-src","fixed_in":["5.15.17+dfsg-4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP2","package":"qt6-qtdeclarative","fixed_in":["6.5.2-2.oe2403sp2"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"qt6-qtdeclarative","fixed_in":["6.5.2-2.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"qt6-qtdeclarative","fixed_in":["6.5.2-2.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"qt5-qtdeclarative","fixed_in":["5.15.2-2.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"qt5-qtdeclarative","fixed_in":["5.15.10-2.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"qt5-qtdeclarative","fixed_in":["5.15.10-2.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP2","package":"qt5-qtdeclarative","fixed_in":["5.15.10-2.oe2403sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"qt5-qtdeclarative","fixed_in":["5.15.2-2.oe2203sp3"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"qt5-qtdeclarative","fixed_in":["0:5.15.3-3.el8_10"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"qtdeclarative-opensource-src","fixed_in":["5.12.8-0ubuntu1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"qtdeclarative-opensource-src","fixed_in":["5.15.3+dfsg-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:24.04:LTS","package":"qtdeclarative-opensource-src","fixed_in":["5.15.13+dfsg-1ubuntu0.1+esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"qt5-qtdeclarative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-3.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"qt5-qtdeclarative-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-3.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"qt5-qtdeclarative-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-3.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"qt5-qtdeclarative-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-3.el8_10"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"qtdeclarative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.1-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"qt5-qtdeclarative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"5.12.5-5"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"qt6-declarative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.10.2+dfsg-1","6.10.2+dfsg-2","6.10.2+dfsg-3","6.10.2+dfsg-4","6.10.2+dfsg-5","6.10.2+dfsg-6","6.11.2+dfsg-1","6.11.2+dfsg-2","6.11.2+dfsg-3","6.11.2+dfsg-3+sparc64","6.4.2+dfsg-1","6.4.2+dfsg-2","6.4.2+dfsg-3","6.4.2+dfsg-4","6.6.0+dfsg-1","6.6.0+dfsg-2","6.6.0+dfsg-3","6.6.1+dfsg-1","6.6.1+dfsg-2","6.6.1+dfsg-3","6.6.2+dfsg-1","6.6.2+dfsg-2","6.6.2+dfsg-3","6.6.2+dfsg-4","6.6.2+dfsg-4+hurd.1","6.7.2+dfsg-1","6.7.2+dfsg-10","6.7.2+dfsg-10+hurd.1","6.7.2+dfsg-11","6.7.2+dfsg-2","6.7.2+dfsg-3","6.7.2+dfsg-4","6.7.2+dfsg-5","6.7.2+dfsg-6","6.7.2+dfsg-7","6.7.2+dfsg-8","6.7.2+dfsg-9","6.8.2+dfsg-1","6.8.2+dfsg-2","6.8.2+dfsg-3","6.8.2+dfsg-4","6.8.2+dfsg-5","6.8.2+dfsg-6","6.8.2+dfsg-6+alpha","6.8.2+dfsg-6+hurd.1","6.8.2+dfsg-7","6.8.2+dfsg-7+m68k","6.9.1+dfsg-1","6.9.1+dfsg-2","6.9.2+dfsg-1","6.9.2+dfsg-2","6.9.2+dfsg-3","6.9.2+dfsg-4","6.9.2+dfsg-5","6.9.2+dfsg-6"]},{"source":"osv","ecosystem":"Debian:13","package":"qt6-declarative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.10.2+dfsg-1","6.10.2+dfsg-2","6.10.2+dfsg-3","6.10.2+dfsg-4","6.10.2+dfsg-5","6.10.2+dfsg-6","6.11.2+dfsg-1","6.11.2+dfsg-2","6.11.2+dfsg-3","6.11.2+dfsg-3+sparc64","6.8.2+dfsg-7","6.8.2+dfsg-7+m68k","6.9.1+dfsg-1","6.9.1+dfsg-2","6.9.2+dfsg-1","6.9.2+dfsg-2","6.9.2+dfsg-3","6.9.2+dfsg-4","6.9.2+dfsg-5","6.9.2+dfsg-6"]},{"source":"osv","ecosystem":"Debian:14","package":"qt6-declarative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.10.2+dfsg-1","6.10.2+dfsg-2","6.10.2+dfsg-3","6.10.2+dfsg-4","6.10.2+dfsg-5","6.10.2+dfsg-6","6.11.2+dfsg-1","6.11.2+dfsg-2","6.11.2+dfsg-3","6.11.2+dfsg-3+sparc64","6.8.2+dfsg-7","6.8.2+dfsg-7+m68k","6.9.1+dfsg-1","6.9.1+dfsg-2","6.9.2+dfsg-1","6.9.2+dfsg-2","6.9.2+dfsg-3","6.9.2+dfsg-4","6.9.2+dfsg-5","6.9.2+dfsg-6"]},{"source":"osv","ecosystem":"Debian:12","package":"qtdeclarative-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.10+dfsg-1","5.15.10+dfsg-2","5.15.10+dfsg-2+m68k","5.15.10+dfsg-2+m68k.1","5.15.11+dfsg-1","5.15.12+dfsg-1","5.15.13+dfsg-1","5.15.13+dfsg-2","5.15.13+dfsg-2+hurd.1","5.15.13+dfsg-2+loong64","5.15.13+dfsg-2+m68k","5.15.15+dfsg-1","5.15.15+dfsg-2","5.15.15+dfsg-2+hurd.1","5.15.15+dfsg-3","5.15.15+dfsg-3+m68k","5.15.16+dfsg-1","5.15.17+dfsg-1","5.15.17+dfsg-2","5.15.17+dfsg-2+hurd.1","5.15.17+dfsg-3","5.15.17+dfsg-4","5.15.18+dfsg-1","5.15.18+dfsg-2","5.15.19+dfsg-1","5.15.19+dfsg-2","5.15.8+dfsg-3","5.15.9+dfsg-1"]},{"source":"osv","ecosystem":"Debian:13","package":"qtdeclarative-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.15+dfsg-3","5.15.15+dfsg-3+m68k","5.15.16+dfsg-1","5.15.17+dfsg-1","5.15.17+dfsg-2","5.15.17+dfsg-2+hurd.1","5.15.17+dfsg-3","5.15.17+dfsg-4","5.15.18+dfsg-1","5.15.18+dfsg-2","5.15.19+dfsg-1","5.15.19+dfsg-2"]},{"source":"osv","ecosystem":"Debian:14","package":"qtdeclarative-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.17+dfsg-4"}]}],"versions":["5.15.15+dfsg-3","5.15.15+dfsg-3+m68k","5.15.16+dfsg-1","5.15.17+dfsg-1","5.15.17+dfsg-2","5.15.17+dfsg-2+hurd.1","5.15.17+dfsg-3"]},{"source":"osv","ecosystem":"Debian:12","package":"qtdeclarative-opensource-src-gles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.10+dfsg-1","5.15.10+dfsg-2","5.15.10+dfsg-3","5.15.12+dfsg-1","5.15.13+dfsg-1","5.15.13+dfsg-2","5.15.13+dfsg-3","5.15.15+dfsg-1","5.15.15+dfsg-2","5.15.17+dfsg-1","5.15.17+dfsg-2","5.15.18+dfsg-1","5.15.19+dfsg-1","5.15.19+dfsg-2","5.15.8+dfsg-1","5.15.9+dfsg-1"]},{"source":"osv","ecosystem":"Debian:13","package":"qtdeclarative-opensource-src-gles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.15+dfsg-2","5.15.17+dfsg-1","5.15.17+dfsg-2","5.15.18+dfsg-1","5.15.19+dfsg-1","5.15.19+dfsg-2"]},{"source":"osv","ecosystem":"Debian:14","package":"qtdeclarative-opensource-src-gles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.15+dfsg-2","5.15.17+dfsg-1","5.15.17+dfsg-2","5.15.18+dfsg-1","5.15.19+dfsg-1","5.15.19+dfsg-2"]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"qt6-qtdeclarative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.2-2.oe2403sp2"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"qt6-qtdeclarative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.2-2.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"qt6-qtdeclarative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.2-2.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"qt5-qtdeclarative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.2-2.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"qt5-qtdeclarative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.10-2.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"qt5-qtdeclarative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.10-2.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"qt5-qtdeclarative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.10-2.oe2403sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"qt5-qtdeclarative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.2-2.oe2203sp3"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"qt5-qtdeclarative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-3.el8_10"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"qtdeclarative-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.2-1ubuntu6","5.4.2-1ubuntu7","5.4.2-1ubuntu8","5.5.1-2ubuntu2","5.5.1-2ubuntu3","5.5.1-2ubuntu4","5.5.1-2ubuntu5","5.5.1-2ubuntu6"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"qtdeclarative-opensource-src-gles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.2-1ubuntu7","5.4.2-1ubuntu8","5.5.1-2ubuntu1","5.5.1-2ubuntu3","5.5.1-2ubuntu4","5.5.1-2ubuntu5","5.5.1-2ubuntu6"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"qtdeclarative-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.9.1-4ubuntu1","5.9.2-3ubuntu2","5.9.3-0ubuntu1","5.9.4-0ubuntu1","5.9.5-0ubuntu1","5.9.5-0ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"qtdeclarative-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.12.8-0ubuntu1+esm1"}]}],"versions":["5.12.4-1","5.12.5-3","5.12.5-5","5.12.5-5build1","5.12.8-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"qtdeclarative-opensource-src-gles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.12.5-2","5.12.5-2build1","5.12.8-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"qt6-declarative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.2+dfsg-4ubuntu1","6.2.4+dfsg-2ubuntu1","6.2.4+dfsg-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"qtdeclarative-opensource-src-gles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.2+dfsg-3","5.15.3+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"qtdeclarative-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3+dfsg-1ubuntu0.1~esm1"}]}],"versions":["5.15.2+dfsg-8","5.15.2+dfsg-9","5.15.2+dfsg-10","5.15.3+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"qt6-declarative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.4.2+dfsg-3","6.4.2+dfsg-4","6.4.2+dfsg-4build1","6.4.2+dfsg-4build2","6.4.2+dfsg-4build3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"qtdeclarative-opensource-src-gles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.10+dfsg-2","5.15.12+dfsg-1","5.15.12+dfsg-1build1","5.15.12+dfsg-1build2","5.15.13+dfsg-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"qtdeclarative-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.13+dfsg-1ubuntu0.1+esm1"}]}],"versions":["5.15.10+dfsg-2","5.15.12+dfsg-1","5.15.12+dfsg-1build1","5.15.12+dfsg-1build2","5.15.13+dfsg-1","5.15.13+dfsg-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"qt6-declarative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.3+dfsg-0ubuntu1","6.9.2+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"qtdeclarative-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.15+dfsg-3","5.15.17+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"qtdeclarative-opensource-src-gles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.15+dfsg-2","5.15.17+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"qt6-declarative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.10.2+dfsg-3","6.10.2+dfsg-6","6.11.2+dfsg-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"qtdeclarative-opensource-src-gles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.18+dfsg-1","5.15.19+dfsg-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"qtdeclarative-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.12.8-0ubuntu1+esm1"}]}],"versions":["5.12.4-1","5.12.5-3","5.12.5-5","5.12.5-5build1","5.12.8-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"qtdeclarative-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3+dfsg-1ubuntu0.1~esm1"}]}],"versions":["5.15.2+dfsg-8","5.15.2+dfsg-9","5.15.2+dfsg-10","5.15.3+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"qtdeclarative-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.13+dfsg-1ubuntu0.1+esm1"}]}],"versions":["5.15.10+dfsg-2","5.15.12+dfsg-1","5.15.12+dfsg-1build1","5.15.12+dfsg-1build2","5.15.13+dfsg-1","5.15.13+dfsg-1ubuntu0.1"]}],"products":[{"vendor":"qt","product":"qt"},{"vendor":"the qt company","product":"qt"}],"references":[{"url":"https://codereview.qt-project.org/c/qt/qtdeclarative/+/687239","tags":["report"]},{"url":"https://codereview.qt-project.org/c/qt/qtdeclarative/+/687766","tags":["report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-12385","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-x9vj-67g7-457m"},{"url":"https://access.redhat.com/errata/RHSA-2026:96075","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-12385","tags":["report"]},{"url":"https://bugzilla.redhat.com/2556149","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-96075.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-12385","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2844","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2845","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2846","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2870","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2871","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2872","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2873","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2874","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:96075","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2556149","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-12385","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-12385","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8357-1","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-12385","title":"Improper validation of \u003cimg\u003e tag size in Text component parser","description":"Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation.\n\n\nThis issue affects users of the Text component in Qt Quick. Missing validation of the width and height in the \u003cimg\u003e tag could cause an application to become unresponsive.\n\n\n\nThis issue affects Qt: from 5.0.0 through 6.5.10, from 6.6.0 through 6.8.5, from 6.9.0 through 6.10.0.","status":"published","published":"2025-12-03T19:38:53.13Z","modified":"2026-07-29T08:58:29.24Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna"}],"cwes":["CWE-770","CWE-1284"],"updated_at":"2026-11-02T14:32:42.078906Z"}],"euvd":[{"id":"EUVD-2025-201103","description":"Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation.\n\n\nThis issue affects users of the Text component in Qt Quick. Missing validation of the width and height in the \u003cimg\u003e tag could cause an application to become unresponsive.\n\n\n\nThis issue affects Qt: from 5.0.0 through 6.5.10, from 6.6.0 through 6.8.5, from 6.9.0 through 6.10.0.","status":"published","published":"2025-12-03T19:38:53Z","modified":"2026-07-29T08:58:29Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T18:02:30.59681Z"}],"ghsa":[{"id":"GHSA-x9vj-67g7-457m","title":"Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity...","description":"Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation.\nThis issue affects users of the Text component in Qt Quick. Missing validation of the width and height in the \u003cimg\u003e tag could cause an application to become unresponsive.\n\nThis issue affects Qt: from 5.0.0 through 6.5.10, from 6.6.0 through 6.8.5, from 6.9.0 through 6.10.0.","status":"published","published":"2025-12-03T21:31:05Z","modified":"2025-12-03T21:31:11Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T15:05:01.902395Z"}],"nvd":[{"id":"CVE-2025-12385","description":"Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation.\n\n\nThis issue affects users of the Text component in Qt Quick. Missing validation of the width and height in the \u003cimg\u003e tag could cause an application to become unresponsive.\n\n\n\nThis issue affects Qt: from 5.0.0 through 6.5.10, from 6.6.0 through 6.8.5, from 6.9.0 through 6.10.0.","status":"published","published":"2025-12-03T20:16:24.17Z","modified":"2026-10-18T17:10:00.11Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"}],"cwes":["CWE-770","CWE-1284"],"updated_at":"2026-11-02T14:11:47.746175Z"}],"osv":[{"id":"DEBIAN-CVE-2025-12385","description":"Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation.   This issue affects users of the Text component in Qt Quick. Missing validation of the width and height in the \u003cimg\u003e tag could cause an application to become unresponsive.    This issue affects Qt: from 5.0.0 through 6.5.10, from 6.6.0 through 6.8.5, from 6.9.0 through 6.10.0.","status":"published","published":"2025-12-03T20:16:24.17Z","modified":"2026-10-23T18:04:34.908479791Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"updated_at":"2026-11-02T15:45:45.102284Z"},{"id":"OESA-2025-2844","title":"qt6-qtdeclarative security update","description":".\r\n\r\nSecurity Fix(es):\n\nAllocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation.\nThis issue affects users of the Text component in Qt Quick. Missing validation of the width and height in the \u0026lt;img\u0026gt; tag could cause an application to become unresponsive.\n\nThis issue affects Qt: from 5.0.0 through 6.5.10, from 6.6.0 through 6.8.5, from 6.9.0 through 6.10.0.(CVE-2025-12385)","status":"published","published":"2025-12-12T11:09:58Z","modified":"2026-08-18T01:19:23.306248441Z","cvss":[{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:45.339366Z"},{"id":"OESA-2025-2845","title":"qt6-qtdeclarative security update","description":".\r\n\r\nSecurity Fix(es):\n\nAllocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation.\nThis issue affects users of the Text component in Qt Quick. Missing validation of the width and height in the \u0026lt;img\u0026gt; tag could cause an application to become unresponsive.\n\nThis issue affects Qt: from 5.0.0 through 6.5.10, from 6.6.0 through 6.8.5, from 6.9.0 through 6.10.0.(CVE-2025-12385)","status":"published","published":"2025-12-12T11:09:58Z","modified":"2026-08-18T01:19:23.587512459Z","cvss":[{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:45.339366Z"},{"id":"OESA-2025-2846","title":"qt6-qtdeclarative security update","description":".\r\n\r\nSecurity Fix(es):\n\nAllocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation.\nThis issue affects users of the Text component in Qt Quick. Missing validation of the width and height in the \u0026lt;img\u0026gt; tag could cause an application to become unresponsive.\n\nThis issue affects Qt: from 5.0.0 through 6.5.10, from 6.6.0 through 6.8.5, from 6.9.0 through 6.10.0.(CVE-2025-12385)","status":"published","published":"2025-12-12T11:09:58Z","modified":"2026-08-18T01:19:23.62662611Z","cvss":[{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:45.339366Z"},{"id":"OESA-2025-2870","title":"qt5-qtdeclarative security update","description":".\r\n\r\nSecurity Fix(es):\n\nAllocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation.\nThis issue affects users of the Text component in Qt Quick. Missing validation of the width and height in the \u0026lt;img\u0026gt; tag could cause an application to become unresponsive.\n\nThis issue affects Qt: from 5.0.0 through 6.5.10, from 6.6.0 through 6.8.5, from 6.9.0 through 6.10.0.(CVE-2025-12385)","status":"published","published":"2025-12-30T11:10:00Z","modified":"2026-08-18T01:19:23.995250247Z","cvss":[{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:45.339366Z"},{"id":"OESA-2025-2871","title":"qt5-qtdeclarative security update","description":".\r\n\r\nSecurity Fix(es):\n\nAllocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation.\nThis issue affects users of the Text component in Qt Quick. Missing validation of the width and height in the \u0026lt;img\u0026gt; tag could cause an application to become unresponsive.\n\nThis issue affects Qt: from 5.0.0 through 6.5.10, from 6.6.0 through 6.8.5, from 6.9.0 through 6.10.0.(CVE-2025-12385)","status":"published","published":"2025-12-30T11:10:00Z","modified":"2026-08-18T01:19:24.066414523Z","cvss":[{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:45.339366Z"},{"id":"OESA-2025-2872","title":"qt5-qtdeclarative security update","description":".\r\n\r\nSecurity Fix(es):\n\nAllocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation.\nThis issue affects users of the Text component in Qt Quick. Missing validation of the width and height in the \u0026lt;img\u0026gt; tag could cause an application to become unresponsive.\n\nThis issue affects Qt: from 5.0.0 through 6.5.10, from 6.6.0 through 6.8.5, from 6.9.0 through 6.10.0.(CVE-2025-12385)","status":"published","published":"2025-12-30T11:10:00Z","modified":"2026-08-18T01:19:24.009329872Z","cvss":[{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:45.339366Z"},{"id":"OESA-2025-2873","title":"qt5-qtdeclarative security update","description":".\r\n\r\nSecurity Fix(es):\n\nAllocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation.\nThis issue affects users of the Text component in Qt Quick. Missing validation of the width and height in the \u0026lt;img\u0026gt; tag could cause an application to become unresponsive.\n\nThis issue affects Qt: from 5.0.0 through 6.5.10, from 6.6.0 through 6.8.5, from 6.9.0 through 6.10.0.(CVE-2025-12385)","status":"published","published":"2025-12-30T11:10:00Z","modified":"2026-08-18T01:19:24.092589166Z","cvss":[{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:45.339366Z"},{"id":"OESA-2025-2874","title":"qt5-qtdeclarative security update","description":".\r\n\r\nSecurity Fix(es):\n\nAllocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation.\nThis issue affects users of the Text component in Qt Quick. Missing validation of the width and height in the \u0026lt;img\u0026gt; tag could cause an application to become unresponsive.\n\nThis issue affects Qt: from 5.0.0 through 6.5.10, from 6.6.0 through 6.8.5, from 6.9.0 through 6.10.0.(CVE-2025-12385)","status":"published","published":"2025-12-30T11:10:00Z","modified":"2026-08-18T01:19:24.274625145Z","cvss":[{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:45.339366Z"},{"id":"RLSA-2026:96075","title":"Important: qt5-qtdeclarative security update","description":"Qt5 - QtDeclarative component.\n\nSecurity Fix(es):\n\n* qt5-qtdeclarative: qt6-qtdeclarative: Improper validation of \u003cimg\u003e tag size in Text component parser (CVE-2025-12385)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-11-10T12:01:32.688652Z","modified":"2026-11-10T12:30:02.475437112Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-10T12:59:04.624749Z"},{"id":"UBUNTU-CVE-2025-12385","description":"Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation. This issue affects users of the Text component in Qt Quick. Missing validation of the width and height in the \u003cimg\u003e tag could cause an application to become unresponsive. This issue affects Qt: from 5.0.0 through 6.5.10, from 6.6.0 through 6.8.5, from 6.9.0 through 6.10.0.","status":"published","published":"2025-12-03T20:16:00Z","modified":"2026-11-09T12:49:25.087572259Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-09T13:27:42.046613Z"},{"id":"ALSA-2026:96075","title":"Important: qt5-qtdeclarative security update","description":"Qt5 - QtDeclarative component.  \n\nSecurity Fix(es):  \n\n  * qt5-qtdeclarative: qt6-qtdeclarative: Improper validation of \u003cimg\u003e tag size in Text component parser (CVE-2025-12385)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-11-09T00:00:00Z","modified":"2026-11-10T09:45:02.604240388Z","updated_at":"2026-11-10T09:56:02.898004Z"},{"id":"AZL-71555","title":"CVE-2025-12385 affecting package qtdeclarative for versions less than 6.6.1-2","description":"Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation.\n\n\nThis issue affects users of the Text component in Qt Quick. Missing validation of the width and height in the \u003cimg\u003e tag could cause an application to become unresponsive.\n\n\n\nThis issue affects Qt: from 5.0.0 through 6.5.10, from 6.6.0 through 6.8.5, from 6.9.0 through 6.10.0.","status":"published","published":"2025-12-03T20:16:24Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:24.309973Z"},{"id":"AZL-71647","title":"CVE-2025-12385 affecting package qt5-qtdeclarative 5.12.5-5","description":"Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation.\nThis issue affects users of the Text component in Qt Quick. Missing validation of the width and height in the \u003cimg\u003e tag could cause an application to become unresponsive.\n\nThis issue affects Qt: from 5.0.0 through 6.5.10, from 6.6.0 through 6.8.5, from 6.9.0 through 6.10.0.","status":"published","published":"2025-12-03T20:16:24Z","modified":"2026-04-21T04:36:38.098491Z","updated_at":"2026-11-02T15:28:09.201912Z"},{"id":"USN-8357-1","title":"qtdeclarative-opensource-src vulnerability","description":"It was discovered that Qt Declarative did not properly validate the\nwidth and height attributes of image tags in the Text component of Qt\nQuick. An attacker could possibly use this issue to cause Qt Declarative\nto use excessive resources, leading to a denial of service.","status":"published","published":"2026-06-01T14:46:41Z","modified":"2026-06-01T17:17:54.011879641Z","updated_at":"2026-11-02T16:58:25.103481Z"}]}}