{"id":"CVE-2025-23050","aliases":["AZL-69557","DEBIAN-CVE-2025-23050","EUVD-2025-37272","GHSA-pj6p-fx56-wq5h","OESA-2025-1087","OESA-2025-1088","OESA-2025-1089","UBUNTU-CVE-2025-23050","openSUSE-SU-2025:0033-1","openSUSE-SU-2025:14692-1","openSUSE-SU-2025:14716-1"],"status":"published","title":"QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to...","description":"QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read (or division by zero). This is fixed in 5.15.19, 6.5.9, and 6.8.2.","severity":{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00189,"percentile":0.08596,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2025-01-23T00:00:00Z","modified":"2026-10-23T18:03:46Z","fixes":[{"ecosystem":"Debian:13","package":"qt6-connectivity","fixed_in":["6.7.2-8"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"qt6-connectivity","fixed_in":["6.7.2-8"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"qtconnectivity-opensource-src","fixed_in":["5.15.15-3"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"qt5-qtconnectivity","fixed_in":["5.11.1-5.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"qt5-qtconnectivity","fixed_in":["5.15.2-2.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"qt5-qtconnectivity","fixed_in":["5.15.2-2.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"qt5-qtconnectivity","fixed_in":["5.15.10-2.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"qt5-qtconnectivity","fixed_in":["5.15.10-2.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"qt6-qtconnectivity","fixed_in":["6.5.2-3.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"qt6-qtconnectivity","fixed_in":["6.5.2-3.oe2403sp1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15 SP6","package":"qt6-connectivity","fixed_in":["6.6.3-bp156.2.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15 SP6","package":"qt6-connectivity-docs","fixed_in":["6.6.3-bp156.2.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"qt6-connectivity","fixed_in":["6.6.3-bp156.2.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"qt6-connectivity-docs","fixed_in":["6.6.3-bp156.2.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"qt6-connectivity","fixed_in":["6.8.1-2.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"libqt5-qtconnectivity","fixed_in":["5.15.16+kde2-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"qt5-qtconnectivity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"5.14.2-2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"qt6-connectivity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.10.2-1","6.10.2-2","6.10.2-3","6.11.2-1","6.11.2-2","6.4.2-1","6.4.2-2","6.4.2-3","6.4.2-4","6.4.2-5","6.6.0-1","6.6.0-2","6.6.0-3","6.6.1-1","6.6.1-2","6.6.2-1","6.6.2-2","6.7.2-1","6.7.2-2","6.7.2-3","6.7.2-4","6.7.2-5","6.7.2-6","6.7.2-7","6.7.2-8","6.8.2-1","6.8.2-2","6.8.2-3","6.9.1-1","6.9.1-2","6.9.2-1","6.9.2-2","6.9.2-3","6.9.2-4"]},{"source":"osv","ecosystem":"Debian:13","package":"qt6-connectivity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.2-8"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"qt6-connectivity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.2-8"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"qtconnectivity-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.10-1","5.15.10-2","5.15.12-1","5.15.13-1","5.15.13-2","5.15.15-1","5.15.15-2","5.15.15-3","5.15.17-1","5.15.17-2","5.15.18-1","5.15.19-1","5.15.19-2","5.15.8-2","5.15.9-1"]},{"source":"osv","ecosystem":"Debian:13","package":"qtconnectivity-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.15-3"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"qt5-qtconnectivity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.11.1-5.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"qt5-qtconnectivity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.2-2.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"qt5-qtconnectivity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.2-2.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"qt5-qtconnectivity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.10-2.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"qt5-qtconnectivity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.10-2.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"qt6-qtconnectivity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.2-3.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"qt6-qtconnectivity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.2-3.oe2403sp1"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"qtconnectivity-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.2-2build1","5.5.1-2build1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"qtconnectivity-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.9.1-2","5.9.2-2build1","5.9.3-0ubuntu1","5.9.4-0ubuntu1","5.9.5-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"qtconnectivity-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.12.4-1","5.12.5-1","5.12.5-1build1","5.12.8-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"qt6-connectivity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.2-2","6.2.4-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"qtconnectivity-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.2-2","5.15.3-1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"qt6-connectivity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.4.2-4","6.4.2-5","6.4.2-5build1","6.4.2-5build2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"qtconnectivity-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.10-2","5.15.12-1","5.15.12-1build1","5.15.12-1build2","5.15.13-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"qtconnectivity-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.17-1"]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP6","package":"qt6-connectivity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.3-bp156.2.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP6","package":"qt6-connectivity-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.3-bp156.2.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"qt6-connectivity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.3-bp156.2.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"qt6-connectivity-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.3-bp156.2.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"qt6-connectivity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.1-2.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libqt5-qtconnectivity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.16+kde2-1.1"}]}]}],"products":[{"vendor":"qt","product":"qt"},{"vendor":"the qt company","product":"qt"}],"references":[{"url":"https://codereview.qt-project.org/q/QLowEnergyController"},{"url":"https://www.qt.io/blog/security-advisory-qlowenergycontroller-on-linux","tags":["report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-23050","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-pj6p-fx56-wq5h"},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-23050","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1087","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1088","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1089","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-23050","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-23050","tags":["report"]},{"url":"https://github.com/qt/qtconnectivity/commit/aecbd657c841a2a8c74631ceac96b8ff1f03ab5c","tags":["report"]},{"url":"https://download.qt.io/official_releases/qt/5.15/CVE-2025-23050-qtconnectivity-5.15.diff","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HWBTFAFOPUNR57AYROD5W4R5QZH3R723/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1236237","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-23050","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XMH45EXUT7GQSQEUBYP762JOBF4U72RN/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4DQ7AHRLARKCFHHLE2JN75LWFVPSXV3D/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-23050","description":"QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read (or division by zero). This is fixed in 5.15.19, 6.5.9, and 6.8.2.","status":"published","published":"2025-10-31T00:00:00Z","modified":"2025-10-31T16:47:22.226Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:32:33.410838Z"}],"euvd":[{"id":"EUVD-2025-37272","description":"QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read (or division by zero). This is fixed in 5.15.19, 6.5.9, and 6.8.2.","status":"published","published":"2025-10-31T00:00:00Z","modified":"2025-10-31T16:47:22Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T19:49:35.368666Z"}],"ghsa":[{"id":"GHSA-pj6p-fx56-wq5h","title":"QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to...","description":"QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read (or division by zero). This is fixed in 5.15.19, 6.5.9, and 6.8.2.","status":"published","published":"2025-10-31T03:30:23Z","modified":"2025-10-31T03:30:28Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T15:04:15.956958Z"}],"nvd":[{"id":"CVE-2025-23050","description":"QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read (or division by zero). This is fixed in 5.15.19, 6.5.9, and 6.8.2.","status":"published","published":"2025-10-31T02:15:31.873Z","modified":"2026-10-19T22:10:00.13Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"secondary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:11:41.607433Z"}],"osv":[{"id":"DEBIAN-CVE-2025-23050","description":"QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read (or division by zero). This is fixed in 5.15.19, 6.5.9, and 6.8.2.","status":"published","published":"2025-10-31T02:15:31.873Z","modified":"2026-10-23T18:03:46.616536214Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:45:45.524682Z"},{"id":"OESA-2025-1087","title":"qt5-qtconnectivity security update","description":"This package provides features as Dial-up, (W)LAN, USB and VPN support.\r\n\r\nSecurity Fix(es):\n\n(CVE-2025-23050)","status":"published","published":"2025-02-08T11:08:11Z","modified":"2026-08-18T01:18:44.771117287Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"OESA-2025-1088","title":"qt6-qtconnectivity security update","description":".\r\n\r\nSecurity Fix(es):\n\n(CVE-2025-23050)","status":"published","published":"2025-02-08T11:08:11Z","modified":"2026-08-18T01:18:45.117411809Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"OESA-2025-1089","title":"qt6-qtconnectivity security update","description":".\r\n\r\nSecurity Fix(es):\n\n(CVE-2025-23050)","status":"published","published":"2025-02-08T11:08:11Z","modified":"2026-08-18T01:18:46.112463101Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"UBUNTU-CVE-2025-23050","description":"QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read (or division by zero). This is fixed in 5.15.19, 6.5.9, and 6.8.2.","status":"published","published":"2025-10-31T02:15:00Z","modified":"2026-04-22T15:38:43.066032Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T16:55:26.330196Z"},{"id":"AZL-69557","title":"CVE-2025-23050 affecting package qt5-qtconnectivity 5.14.2-2","description":"QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read (or division by zero). This is fixed in 5.15.19, 6.5.9, and 6.8.2.","status":"published","published":"2025-10-31T02:15:31Z","modified":"2026-04-21T04:38:37.697406Z","updated_at":"2026-11-02T15:28:08.907584Z"},{"id":"openSUSE-SU-2025:0033-1","title":"Security update for qt6-connectivity","description":"This update for qt6-connectivity fixes the following issues:\n\n- CVE-2025-23050: Fixed buffer over-read and division by zero (boo#1236237)\n","status":"published","published":"2025-01-25T17:01:16Z","modified":"2026-02-04T04:35:33.991287Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"openSUSE-SU-2025:14692-1","title":"libQt6Bluetooth6-6.8.1-2.1 on GA media","description":"These are all security issues fixed in the libQt6Bluetooth6-6.8.1-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-01-23T00:00:00Z","modified":"2026-02-04T03:32:46.732364Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"openSUSE-SU-2025:14716-1","title":"libQt5Bluetooth5-32bit-5.15.16+kde2-1.1 on GA media","description":"These are all security issues fixed in the libQt5Bluetooth5-32bit-5.15.16+kde2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-01-30T00:00:00Z","modified":"2025-05-07T18:16:44.664655Z","updated_at":"2026-11-02T16:58:36.976155Z"}]}}