{"id":"CVE-2025-5455","aliases":["ALSA-2025:9462","ALSA-2025:9486","AZL-64349","AZL-64361","CLSA-2026-1778107793","DEBIAN-CVE-2025-5455","EUVD-2025-16625","GHSA-5cfg-qhv9-4842","MGASA-2025-0212","OESA-2025-1654","OESA-2025-1655","OESA-2025-1725","OESA-2025-1757","OESA-2025-2545","RHSA-2025:11841","RHSA-2025:9462","RHSA-2025:9486","RLSA-2025:9462","RLSA-2025:9486","SUSE-SU-2025:02968-1","SUSE-SU-2025:03599-1","SUSE-SU-2025:3723-1","UBUNTU-CVE-2025-5455","openSUSE-SU-2025:15240-1"],"status":"published","title":"Possible denial of service when passing malformed data in a URL to qDecodeDataUrl","description":"An issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code.\n\n\n\nIf the function was called with malformed data, for example, an URL that\ncontained a \"charset\" parameter that lacked a value (such as\n\"data:charset,\"), and Qt was built with assertions enabled, then it would hit an assertion, resulting in a denial of service\n(abort).\n\n\n\nThis impacts Qt up to 5.15.18, 6.0.0-\u003e6.5.8, 6.6.0-\u003e6.8.3 and 6.9.0. This has been fixed in 5.15.19, 6.5.9, 6.8.4 and 6.9.1.","severity":{"version":"4.0","score":8.4,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H/R:U/RE:M/U:Clear","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.004,"percentile":0.34516,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2025-06-02T08:46:20Z","modified":"2026-11-09T12:49:27Z","fixes":[{"ecosystem":"AlmaLinux:9","package":"qt5-qtbase","fixed_in":["5.15.9-11.el9_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"qt5-qtbase-common","fixed_in":["5.15.9-11.el9_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"qt5-qtbase-devel","fixed_in":["5.15.9-11.el9_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"qt5-qtbase-examples","fixed_in":["5.15.9-11.el9_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"qt5-qtbase-gui","fixed_in":["5.15.9-11.el9_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"qt5-qtbase-mysql","fixed_in":["5.15.9-11.el9_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"qt5-qtbase-odbc","fixed_in":["5.15.9-11.el9_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"qt5-qtbase-postgresql","fixed_in":["5.15.9-11.el9_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"qt5-qtbase-private-devel","fixed_in":["5.15.9-11.el9_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"qt5-qtbase-static","fixed_in":["5.15.9-11.el9_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"qt6-qtbase-common","fixed_in":["6.8.1-9.el10_0"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"qtbase","fixed_in":["6.6.3-4"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"qt5-qtbase","fixed_in":["5.12.11-18"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"qt6-base","fixed_in":["6.8.2+dfsg-8"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"qt6-base","fixed_in":["6.8.2+dfsg-8"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"qtbase-opensource-src","fixed_in":["5.15.15+dfsg-6"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"qtbase-opensource-src","fixed_in":["5.15.15+dfsg-6"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"qtbase6","fixed_in":["6.4.1-5.2.mga9"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"qtbase5","fixed_in":["5.15.7-6.2.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"qt5-qtbase","fixed_in":["5.15.2-18.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"qt5-qtbase","fixed_in":["5.15.2-18.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"qt5-qtbase","fixed_in":["5.15.10-12.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"qt5-qtbase","fixed_in":["5.15.10-12.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"qt5-qtbase","fixed_in":["5.11.1-23.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"qt6-qtbase","fixed_in":["6.5.2-11.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"qt6-qtbase","fixed_in":["6.5.2-12.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP2","package":"qt6-qtbase","fixed_in":["6.5.2-12.oe2403sp2"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP2","package":"qt5-qtbase","fixed_in":["5.15.10-13.oe2403sp2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"qt5-qtbase","fixed_in":["0:5.15.9-11.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"qt5-qtbase-common","fixed_in":["0:5.15.9-11.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"qt5-qtbase-debuginfo","fixed_in":["0:5.15.9-11.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"qt5-qtbase-debugsource","fixed_in":["0:5.15.9-11.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"qt5-qtbase-devel","fixed_in":["0:5.15.9-11.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"qt5-qtbase-devel-debuginfo","fixed_in":["0:5.15.9-11.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"qt5-qtbase-examples","fixed_in":["0:5.15.9-11.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"qt5-qtbase-examples-debuginfo","fixed_in":["0:5.15.9-11.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"qt5-qtbase-gui","fixed_in":["0:5.15.9-11.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"qt5-qtbase-gui-debuginfo","fixed_in":["0:5.15.9-11.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"qt5-qtbase-mysql","fixed_in":["0:5.15.9-11.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"qt5-qtbase-mysql-debuginfo","fixed_in":["0:5.15.9-11.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"qt5-qtbase-odbc","fixed_in":["0:5.15.9-11.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"qt5-qtbase-odbc-debuginfo","fixed_in":["0:5.15.9-11.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"qt5-qtbase-postgresql","fixed_in":["0:5.15.9-11.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"qt5-qtbase-postgresql-debuginfo","fixed_in":["0:5.15.9-11.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"qt5-qtbase-private-devel","fixed_in":["0:5.15.9-11.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"qt5-qtbase-tests-debuginfo","fixed_in":["0:5.15.9-11.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"qt5-qtbase-debuginfo","fixed_in":["0:5.15.9-11.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"qt5-qtbase-debugsource","fixed_in":["0:5.15.9-11.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"qt5-qtbase-devel-debuginfo","fixed_in":["0:5.15.9-11.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"qt5-qtbase-examples-debuginfo","fixed_in":["0:5.15.9-11.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"qt5-qtbase-gui-debuginfo","fixed_in":["0:5.15.9-11.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"qt5-qtbase-mysql-debuginfo","fixed_in":["0:5.15.9-11.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"qt5-qtbase-odbc-debuginfo","fixed_in":["0:5.15.9-11.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"qt5-qtbase-postgresql-debuginfo","fixed_in":["0:5.15.9-11.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"qt5-qtbase-static","fixed_in":["0:5.15.9-11.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"qt5-qtbase-tests-debuginfo","fixed_in":["0:5.15.9-11.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase","fixed_in":["0:5.15.9-11.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-common","fixed_in":["0:5.15.9-11.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-debuginfo","fixed_in":["0:5.15.9-11.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-debugsource","fixed_in":["0:5.15.9-11.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-devel","fixed_in":["0:5.15.9-11.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-devel-debuginfo","fixed_in":["0:5.15.9-11.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-examples","fixed_in":["0:5.15.9-11.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-examples-debuginfo","fixed_in":["0:5.15.9-11.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-gui","fixed_in":["0:5.15.9-11.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-gui-debuginfo","fixed_in":["0:5.15.9-11.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-mysql","fixed_in":["0:5.15.9-11.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-mysql-debuginfo","fixed_in":["0:5.15.9-11.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-odbc","fixed_in":["0:5.15.9-11.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-odbc-debuginfo","fixed_in":["0:5.15.9-11.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-postgresql","fixed_in":["0:5.15.9-11.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-postgresql-debuginfo","fixed_in":["0:5.15.9-11.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-private-devel","fixed_in":["0:5.15.9-11.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-tests-debuginfo","fixed_in":["0:5.15.9-11.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"qt5-qtbase-debuginfo","fixed_in":["0:5.15.9-11.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"qt5-qtbase-debugsource","fixed_in":["0:5.15.9-11.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"qt5-qtbase-devel-debuginfo","fixed_in":["0:5.15.9-11.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"qt5-qtbase-examples-debuginfo","fixed_in":["0:5.15.9-11.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"qt5-qtbase-gui-debuginfo","fixed_in":["0:5.15.9-11.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"qt5-qtbase-mysql-debuginfo","fixed_in":["0:5.15.9-11.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"qt5-qtbase-odbc-debuginfo","fixed_in":["0:5.15.9-11.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"qt5-qtbase-postgresql-debuginfo","fixed_in":["0:5.15.9-11.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"qt5-qtbase-static","fixed_in":["0:5.15.9-11.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"qt5-qtbase-tests-debuginfo","fixed_in":["0:5.15.9-11.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"qt6-qtbase","fixed_in":["0:6.8.1-9.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"qt6-qtbase-common","fixed_in":["0:6.8.1-9.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"qt6-qtbase-debuginfo","fixed_in":["0:6.8.1-9.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"qt6-qtbase-debugsource","fixed_in":["0:6.8.1-9.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"qt6-qtbase-devel","fixed_in":["0:6.8.1-9.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"qt6-qtbase-devel-debuginfo","fixed_in":["0:6.8.1-9.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"qt6-qtbase-examples-debuginfo","fixed_in":["0:6.8.1-9.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"qt6-qtbase-gui","fixed_in":["0:6.8.1-9.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"qt6-qtbase-gui-debuginfo","fixed_in":["0:6.8.1-9.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"qt6-qtbase-mysql","fixed_in":["0:6.8.1-9.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"qt6-qtbase-mysql-debuginfo","fixed_in":["0:6.8.1-9.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"qt6-qtbase-odbc","fixed_in":["0:6.8.1-9.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"qt6-qtbase-odbc-debuginfo","fixed_in":["0:6.8.1-9.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"qt6-qtbase-postgresql","fixed_in":["0:6.8.1-9.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"qt6-qtbase-postgresql-debuginfo","fixed_in":["0:6.8.1-9.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"qt6-qtbase-tests-debuginfo","fixed_in":["0:6.8.1-9.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"qt6-qtbase-examples","fixed_in":["0:6.8.1-9.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"qt6-qtbase-private-devel","fixed_in":["0:6.8.1-9.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"qt6-qtbase-static","fixed_in":["0:6.8.1-9.el10_0"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"qt5-qtbase","fixed_in":["0:5.15.9-11.el9_6"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"qt6-qtbase","fixed_in":["0:6.8.1-9.el10_0"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"libqt5-qtbase","fixed_in":["5.15.17+kde122-2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"qt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.9-11.el9_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qt5-qtbase-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.9-11.el9_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qt5-qtbase-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.9-11.el9_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qt5-qtbase-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.9-11.el9_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qt5-qtbase-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.9-11.el9_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qt5-qtbase-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.9-11.el9_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qt5-qtbase-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.9-11.el9_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qt5-qtbase-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.9-11.el9_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qt5-qtbase-private-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.9-11.el9_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qt5-qtbase-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.9-11.el9_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"qt6-qtbase-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.1-9.el10_0"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.3-4"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"qt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.12.11-18"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"qt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-1.el9.tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"qt5-qtbase-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-1.el9.tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"qt5-qtbase-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-1.el9.tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"qt5-qtbase-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-1.el9.tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"qt5-qtbase-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-1.el9.tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"qt5-qtbase-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-1.el9.tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"qt5-qtbase-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-1.el9.tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"qt5-qtbase-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-1.el9.tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"qt5-qtbase-private-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-1.el9.tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"qt5-qtbase-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-1.el9.tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"qt5-qtbase-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-1.el9.tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"qt6-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.10.2+dfsg-1","6.10.2+dfsg-10","6.10.2+dfsg-10+hurd.1","6.10.2+dfsg-11","6.10.2+dfsg-12","6.10.2+dfsg-13","6.10.2+dfsg-14","6.10.2+dfsg-15","6.10.2+dfsg-16","6.10.2+dfsg-2","6.10.2+dfsg-3","6.10.2+dfsg-4","6.10.2+dfsg-5","6.10.2+dfsg-6","6.10.2+dfsg-7","6.10.2+dfsg-7+hurd.1","6.10.2+dfsg-8","6.10.2+dfsg-9","6.11.2+dfsg-1","6.11.2+dfsg-2","6.11.2+dfsg-3","6.11.2+dfsg-4","6.4.2+dfsg-10","6.4.2+dfsg-11","6.4.2+dfsg-11~bpo11+1","6.4.2+dfsg-12","6.4.2+dfsg-13","6.4.2+dfsg-14","6.4.2+dfsg-15","6.4.2+dfsg-16","6.4.2+dfsg-17","6.4.2+dfsg-18","6.4.2+dfsg-18+loong64","6.4.2+dfsg-19","6.4.2+dfsg-20","6.4.2+dfsg-21","6.4.2+dfsg-21.1","6.6.0+dfsg-1","6.6.0+dfsg-2","6.6.0+dfsg-3","6.6.0+dfsg-4","6.6.0+dfsg-5","6.6.0+dfsg-6","6.6.1+dfsg-1","6.6.1+dfsg-2","6.6.1+dfsg-3","6.6.1+dfsg-4","6.6.1+dfsg-5","6.6.1+dfsg-6","6.6.2+dfsg-1","6.6.2+dfsg-10","6.6.2+dfsg-11","6.6.2+dfsg-12","6.6.2+dfsg-2","6.6.2+dfsg-3","6.6.2+dfsg-4","6.6.2+dfsg-5","6.6.2+dfsg-6","6.6.2+dfsg-7","6.6.2+dfsg-8","6.6.2+dfsg-9","6.7.2+dfsg-1","6.7.2+dfsg-2","6.7.2+dfsg-3","6.7.2+dfsg-4","6.7.2+dfsg-4+m68k","6.7.2+dfsg-5","6.7.2+dfsg-6","6.8.2+dfsg-1","6.8.2+dfsg-10","6.8.2+dfsg-10.1","6.8.2+dfsg-2","6.8.2+dfsg-3","6.8.2+dfsg-4","6.8.2+dfsg-5","6.8.2+dfsg-5+m68k","6.8.2+dfsg-6","6.8.2+dfsg-7","6.8.2+dfsg-8","6.8.2+dfsg-9","6.9.1+dfsg-1","6.9.1+dfsg-2","6.9.1+dfsg-3","6.9.1+dfsg-4","6.9.1+dfsg-5","6.9.2+dfsg-1","6.9.2+dfsg-2","6.9.2+dfsg-3","6.9.2+dfsg-4"]},{"source":"osv","ecosystem":"Debian:13","package":"qt6-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.2+dfsg-8"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"qt6-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.2+dfsg-8"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"qtbase-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.10+dfsg-1","5.15.10+dfsg-2","5.15.10+dfsg-3","5.15.10+dfsg-4","5.15.10+dfsg-5","5.15.10+dfsg-6","5.15.10+dfsg-7","5.15.10+dfsg-7.1","5.15.10+dfsg-7.2","5.15.11+dfsg-1","5.15.12+dfsg-1","5.15.12+dfsg-2","5.15.12+dfsg-3","5.15.13+dfsg-1","5.15.13+dfsg-2","5.15.13+dfsg-3","5.15.13+dfsg-4","5.15.14+dfsg-1","5.15.15+dfsg-1","5.15.15+dfsg-2","5.15.15+dfsg-3","5.15.15+dfsg-4","5.15.15+dfsg-5","5.15.15+dfsg-6","5.15.16+dfsg-1","5.15.16+dfsg-2","5.15.17+dfsg-1","5.15.17+dfsg-2","5.15.17+dfsg-3","5.15.17+dfsg-4","5.15.17+dfsg-5","5.15.17+dfsg-6","5.15.17+dfsg-7","5.15.17+dfsg-8","5.15.18+dfsg-1","5.15.18+dfsg-2","5.15.19+dfsg-1","5.15.19+dfsg-2","5.15.19+dfsg-3","5.15.19+dfsg-4","5.15.8+dfsg-11","5.15.8+dfsg-11+deb12u1","5.15.8+dfsg-11+deb12u2","5.15.8+dfsg-11+deb12u3","5.15.8+dfsg-12","5.15.8+dfsg-13","5.15.9+dfsg-1","5.15.9+dfsg-2","5.15.9+dfsg-3"]},{"source":"osv","ecosystem":"Debian:13","package":"qtbase-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.15+dfsg-6"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"qtbase-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.15+dfsg-6"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"qtbase6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.1-5.2.mga9"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"qtbase5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.7-6.2.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"qt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.2-18.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"qt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.2-18.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"qt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.10-12.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"qt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.10-12.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"qt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.11.1-23.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"qt6-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.2-11.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"qt6-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.2-12.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"qt6-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.2-12.oe2403sp2"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"qt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.10-13.oe2403sp2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"qt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"qt5-qtbase-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"qt5-qtbase-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"qt5-qtbase-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"qt5-qtbase-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"qt5-qtbase-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"qt5-qtbase-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"qt5-qtbase-examples-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"qt5-qtbase-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"qt5-qtbase-gui-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"qt5-qtbase-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"qt5-qtbase-mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"qt5-qtbase-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"qt5-qtbase-odbc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"qt5-qtbase-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"qt5-qtbase-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"qt5-qtbase-private-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"qt5-qtbase-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"qt5-qtbase-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"qt5-qtbase-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"qt5-qtbase-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"qt5-qtbase-examples-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"qt5-qtbase-gui-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"qt5-qtbase-mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"qt5-qtbase-odbc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"qt5-qtbase-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"qt5-qtbase-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"qt5-qtbase-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-examples-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-gui-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-odbc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-private-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"qt5-qtbase-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"qt5-qtbase-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"qt5-qtbase-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"qt5-qtbase-examples-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"qt5-qtbase-gui-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"qt5-qtbase-mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"qt5-qtbase-odbc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"qt5-qtbase-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"qt5-qtbase-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"qt5-qtbase-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"qt6-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.1-9.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"qt6-qtbase-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.1-9.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"qt6-qtbase-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.1-9.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"qt6-qtbase-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.1-9.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"qt6-qtbase-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.1-9.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"qt6-qtbase-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.1-9.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"qt6-qtbase-examples-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.1-9.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"qt6-qtbase-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.1-9.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"qt6-qtbase-gui-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.1-9.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"qt6-qtbase-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.1-9.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"qt6-qtbase-mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.1-9.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"qt6-qtbase-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.1-9.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"qt6-qtbase-odbc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.1-9.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"qt6-qtbase-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.1-9.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"qt6-qtbase-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.1-9.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"qt6-qtbase-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.1-9.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"qt6-qtbase-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.1-9.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"qt6-qtbase-private-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.1-9.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"qt6-qtbase-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.1-9.el10_0"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"qt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-11.el9_6"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"qt6-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.1-9.el10_0"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.7-8.22.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"libqt4-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.7-8.22.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.7-8.22.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"qt6-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.3-150600.3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"qt6-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.3-150600.3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"qt6-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.3-150600.3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"qt6-base-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.3-150600.3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"qt6-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.3-150600.3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"qt6-base-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.3-150600.3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"qt6-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.3-150600.3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"qt6-base-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.3-150600.3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"libqt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.12+kde151-150600.3.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"libqt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.12+kde151-150600.3.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"libqt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.12+kde151-150600.3.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"libqt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.12+kde151-150600.3.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"libqt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.12+kde151-150600.3.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"qtbase-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.2+dfsg-2ubuntu9","5.5.1+dfsg-6ubuntu4","5.5.1+dfsg-10ubuntu2","5.5.1+dfsg-13ubuntu1","5.5.1+dfsg-13ubuntu2","5.5.1+dfsg-13ubuntu3","5.5.1+dfsg-14ubuntu1","5.5.1+dfsg-14ubuntu2","5.5.1+dfsg-14ubuntu3","5.5.1+dfsg-15ubuntu1","5.5.1+dfsg-16ubuntu1","5.5.1+dfsg-16ubuntu6","5.5.1+dfsg-16ubuntu7","5.5.1+dfsg-16ubuntu7.1","5.5.1+dfsg-16ubuntu7.2","5.5.1+dfsg-16ubuntu7.5","5.5.1+dfsg-16ubuntu7.6","5.5.1+dfsg-16ubuntu7.7","5.5.1+dfsg-16ubuntu7.7+esm1","5.5.1+dfsg-16ubuntu7.7+esm2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"qtbase-opensource-src-gles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.2+dfsg-2ubuntu9","5.5.1+dfsg-6ubuntu1","5.5.1+dfsg-10ubuntu1","5.5.1+dfsg-13ubuntu1","5.5.1+dfsg-13ubuntu2","5.5.1+dfsg-13ubuntu3","5.5.1+dfsg-14ubuntu1","5.5.1+dfsg-14ubuntu2","5.5.1+dfsg-14ubuntu3","5.5.1+dfsg-15ubuntu1","5.5.1+dfsg-16ubuntu1","5.5.1+dfsg-16ubuntu4","5.5.1+dfsg-16ubuntu5","5.5.1+dfsg-16ubuntu6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"qtbase-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.9.1+dfsg-10ubuntu1","5.9.1+dfsg-10ubuntu2","5.9.2+dfsg-4ubuntu6","5.9.3+dfsg-0ubuntu1","5.9.3+dfsg-0ubuntu3","5.9.3+dfsg-0ubuntu4","5.9.4+dfsg-0ubuntu3","5.9.4+dfsg-0ubuntu4","5.9.5+dfsg-0ubuntu1","5.9.5+dfsg-0ubuntu2","5.9.5+dfsg-0ubuntu2.1","5.9.5+dfsg-0ubuntu2.3","5.9.5+dfsg-0ubuntu2.4","5.9.5+dfsg-0ubuntu2.5","5.9.5+dfsg-0ubuntu2.6","5.9.5+dfsg-0ubuntu2.6+esm1","5.9.5+dfsg-0ubuntu2.6+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"qtbase-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.12.4+dfsg-4ubuntu1","5.12.5+dfsg-2","5.12.5+dfsg-8","5.12.5+dfsg-8build1","5.12.5+dfsg-9build1","5.12.8+dfsg-0ubuntu1","5.12.8+dfsg-0ubuntu2.1","5.12.8+dfsg-0ubuntu2.1+esm1","5.12.8+dfsg-0ubuntu2.1+esm2","5.12.8+dfsg-0ubuntu2.1+esm3","5.12.8+dfsg-0ubuntu2.1+esm4"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"qtbase-opensource-src-gles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.12.4+dfsg-1build1","5.12.5+dfsg-1","5.12.5+dfsg-2","5.12.8+dfsg-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"qt6-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.2+dfsg-5ubuntu1","6.2.2+dfsg-6ubuntu1","6.2.2+dfsg-6ubuntu2","6.2.4+dfsg-1ubuntu1","6.2.4+dfsg-2ubuntu1","6.2.4+dfsg-2ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"qtbase-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.2+dfsg-12","5.15.2+dfsg-13","5.15.2+dfsg-14","5.15.2+dfsg-14ubuntu1","5.15.2+dfsg-14ubuntu3","5.15.2+dfsg-15","5.15.3+dfsg-1","5.15.3+dfsg-2","5.15.3+dfsg-2ubuntu0.1","5.15.3+dfsg-2ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"qtbase-opensource-src-gles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.2+dfsg-4","5.15.2+dfsg-5","5.15.3+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"qt6-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.4.2+dfsg-18","6.4.2+dfsg-19","6.4.2+dfsg-19build1","6.4.2+dfsg-20","6.4.2+dfsg-21","6.4.2+dfsg-21.1build4","6.4.2+dfsg-21.1build5"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"qtbase-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.10+dfsg-3","5.15.10+dfsg-5","5.15.10+dfsg-5ubuntu1","5.15.12+dfsg-1ubuntu1","5.15.12+dfsg-3ubuntu1","5.15.12+dfsg-3ubuntu6","5.15.12+dfsg-3ubuntu7","5.15.13+dfsg-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"qtbase-opensource-src-gles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.10+dfsg-2","5.15.10+dfsg-3","5.15.12+dfsg-1","5.15.12+dfsg-1ubuntu1","5.15.12+dfsg-1ubuntu2","5.15.13+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"qt6-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.3+dfsg-0ubuntu2","6.8.3+dfsg-0ubuntu3","6.9.2+dfsg-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"qtbase-opensource-src-gles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.15+dfsg-2","5.15.17+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"qt6-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.10.2+dfsg-7","6.10.2+dfsg-14ubuntu2","6.10.2+dfsg-15","6.10.2+dfsg-16","6.11.2+dfsg-4ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"qtbase-opensource-src-gles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.18+dfsg-1","5.15.19+dfsg-2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"qtbase-opensource-src-gles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.17+dfsg-1","5.15.17+dfsg-2","5.15.18+dfsg-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libqt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.17+kde122-2.1"}]}]}],"products":[{"vendor":"qt","product":"qt"},{"vendor":"the qt company","product":"qt"}],"references":[{"url":"https://codereview.qt-project.org/c/qt/qtbase/+/642006","tags":["web","article","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-5455","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-5cfg-qhv9-4842"},{"url":"https://access.redhat.com/errata/RHSA-2025:9462","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-5455","tags":["report"]},{"url":"https://bugzilla.redhat.com/2369722","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-9462.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:9486","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2025-9486.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1778107793.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-5455","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0212.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34444","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/KQMS4MZAS4ACVLXLPAIC3JKRWOKIVJS7/","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1654","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1655","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1725","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1757","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2545","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:11841","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2369722","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_11841.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-5455","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9462.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9486.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:9462","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:9486","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502968-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1196654","tags":["report"]},{"url":"https://bugzilla.suse.com/1211298","tags":["report"]},{"url":"https://bugzilla.suse.com/1211798","tags":["report"]},{"url":"https://bugzilla.suse.com/1211994","tags":["report"]},{"url":"https://bugzilla.suse.com/1213326","tags":["report"]},{"url":"https://bugzilla.suse.com/1214327","tags":["report"]},{"url":"https://bugzilla.suse.com/1245609","tags":["report"]},{"url":"https://bugzilla.suse.com/357727","tags":["report"]},{"url":"https://bugzilla.suse.com/552218","tags":["report"]},{"url":"https://bugzilla.suse.com/656144","tags":["report"]},{"url":"https://bugzilla.suse.com/717127","tags":["report"]},{"url":"https://bugzilla.suse.com/875470","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-45930","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-32573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-32763","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-34410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-37369","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-38197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5455","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202503599-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1239896","tags":["report"]},{"url":"https://bugzilla.suse.com/1243958","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-30348","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20253723-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-5455","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-5455","title":"Possible denial of service when passing malformed data in a URL to qDecodeDataUrl","description":"An issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code.\n\n\n\nIf the function was called with malformed data, for example, an URL that\ncontained a \"charset\" parameter that lacked a value (such as\n\"data:charset,\"), and Qt was built with assertions enabled, then it would hit an assertion, resulting in a denial of service\n(abort).\n\n\n\nThis impacts Qt up to 5.15.18, 6.0.0-\u003e6.5.8, 6.6.0-\u003e6.8.3 and 6.9.0. This has been fixed in 5.15.19, 6.5.9, 6.8.4 and 6.9.1.","status":"published","published":"2025-06-02T08:46:20.524Z","modified":"2026-07-29T07:34:05.682Z","cvss":[{"version":"4.0","score":8.4,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H/R:U/RE:M/U:Clear","level":"high","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:32:29.97618Z"}],"euvd":[{"id":"EUVD-2025-16625","description":"An issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code.\n\n\n\nIf the function was called with malformed data, for example, an URL that\ncontained a \"charset\" parameter that lacked a value (such as\n\"data:charset,\"), and Qt was built with assertions enabled, then it would hit an assertion, resulting in a denial of service\n(abort).\n\n\n\nThis impacts Qt up to 5.15.18, 6.0.0-\u003e6.5.8, 6.6.0-\u003e6.8.3 and 6.9.0. This has been fixed in 5.15.19, 6.5.9, 6.8.4 and 6.9.1.","status":"published","published":"2025-06-02T08:46:20Z","modified":"2026-07-29T07:34:05Z","cvss":[{"version":"4.0","score":8.4,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H/R:U/RE:M/U:Clear","level":"high"}],"updated_at":"2026-11-02T18:02:30.59681Z"}],"ghsa":[{"id":"GHSA-5cfg-qhv9-4842","title":"An issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in...","description":"An issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code.\n\nIf the function was called with malformed data, for example, an URL that\ncontained a \"charset\" parameter that lacked a value (such as\n\"data:charset,\"), and Qt was built with assertions enabled, then it would hit an assertion, resulting in a denial of service\n(abort).\n\nThis impacts Qt up to 5.15.18, 6.0.0-\u003e6.5.8, 6.6.0-\u003e6.8.3 and 6.9.0. This has been fixed in 5.15.19, 6.5.9, 6.8.4 and 6.9.1.","status":"published","published":"2025-06-02T09:31:02Z","modified":"2025-06-02T09:31:08Z","cvss":[{"version":"4.0","score":8.4,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:U/V:X/RE:M/U:Clear","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:02:32.017383Z"}],"nvd":[{"id":"CVE-2025-5455","description":"An issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code.\n\n\n\nIf the function was called with malformed data, for example, an URL that\ncontained a \"charset\" parameter that lacked a value (such as\n\"data:charset,\"), and Qt was built with assertions enabled, then it would hit an assertion, resulting in a denial of service\n(abort).\n\n\n\nThis impacts Qt up to 5.15.18, 6.0.0-\u003e6.5.8, 6.6.0-\u003e6.8.3 and 6.9.0. This has been fixed in 5.15.19, 6.5.9, 6.8.4 and 6.9.1.","status":"published","published":"2025-06-02T09:15:21.493Z","modified":"2026-07-29T09:16:28.633Z","cvss":[{"version":"4.0","score":8.4,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:U/V:X/RE:M/U:Clear","level":"high","assessor":"secondary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:11:10.143444Z"}],"osv":[{"id":"DEBIAN-CVE-2025-5455","description":"An issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code.    If the function was called with malformed data, for example, an URL that contained a \"charset\" parameter that lacked a value (such as \"data:charset,\"), and Qt was built with assertions enabled, then it would hit an assertion, resulting in a denial of service (abort).    This impacts Qt up to 5.15.18, 6.0.0-\u003e6.5.8, 6.6.0-\u003e6.8.3 and 6.9.0. This has been fixed in 5.15.19, 6.5.9, 6.8.4 and 6.9.1.","status":"published","published":"2025-06-02T09:15:21.493Z","modified":"2026-09-01T20:05:54.682857645Z","cvss":[{"version":"4.0","score":8.4,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:U/V:X/RE:M/U:Clear","level":"high"}],"updated_at":"2026-11-02T15:45:47.378563Z"},{"id":"OESA-2025-1654","title":"qt5-qtbase security update","description":"Qt is a software toolkit for developing applications.\r\n\r\nSecurity Fix(es):\n\nAn issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code.\n\nIf the function was called with malformed data, for example, an URL that\ncontained a \u0026quot;charset\u0026quot; parameter that lacked a value (such as\n\u0026quot;data:charset,\u0026quot;), and Qt was built with assertions enabled, then it would hit an assertion, resulting in a denial of service\n(abort).\n\nThis impacts Qt up to 5.15.18, 6.0.0-\u0026gt;6.5.8, 6.6.0-\u0026gt;6.8.3 and 6.9.0. This has been fixed in 5.15.19, 6.5.9, 6.8.4 and 6.9.1.(CVE-2025-5455)","status":"published","published":"2025-06-20T11:08:44Z","modified":"2026-08-18T01:18:01.373135764Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1655","title":"qt6-qtbase security update","description":"Qt is a software toolkit for developing applications.\r\n\r\nSecurity Fix(es):\n\nAn issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code.\n\nIf the function was called with malformed data, for example, an URL that\ncontained a \u0026quot;charset\u0026quot; parameter that lacked a value (such as\n\u0026quot;data:charset,\u0026quot;), and Qt was built with assertions enabled, then it would hit an assertion, resulting in a denial of service\n(abort).\n\nThis impacts Qt up to 5.15.18, 6.0.0-\u0026gt;6.5.8, 6.6.0-\u0026gt;6.8.3 and 6.9.0. This has been fixed in 5.15.19, 6.5.9, 6.8.4 and 6.9.1.(CVE-2025-5455)","status":"published","published":"2025-06-20T11:08:44Z","modified":"2026-08-18T01:18:00.99303002Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1725","title":"qt6-qtbase security update","description":"Qt is a software toolkit for developing applications.\r\n\r\nSecurity Fix(es):\n\nAn issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code.\n\nIf the function was called with malformed data, for example, an URL that\ncontained a \u0026quot;charset\u0026quot; parameter that lacked a value (such as\n\u0026quot;data:charset,\u0026quot;), and Qt was built with assertions enabled, then it would hit an assertion, resulting in a denial of service\n(abort).\n\nThis impacts Qt up to 5.15.18, 6.0.0-\u0026gt;6.5.8, 6.6.0-\u0026gt;6.8.3 and 6.9.0. This has been fixed in 5.15.19, 6.5.9, 6.8.4 and 6.9.1.(CVE-2025-5455)","status":"published","published":"2025-07-04T11:08:49Z","modified":"2026-08-18T01:18:51.825789756Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1757","title":"qt6-qtbase security update","description":"Qt is a software toolkit for developing applications.\r\n\r\nSecurity Fix(es):\n\nAn issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code.\n\nIf the function was called with malformed data, for example, an URL that\ncontained a \u0026quot;charset\u0026quot; parameter that lacked a value (such as\n\u0026quot;data:charset,\u0026quot;), and Qt was built with assertions enabled, then it would hit an assertion, resulting in a denial of service\n(abort).\n\nThis impacts Qt up to 5.15.18, 6.0.0-\u0026gt;6.5.8, 6.6.0-\u0026gt;6.8.3 and 6.9.0. This has been fixed in 5.15.19, 6.5.9, 6.8.4 and 6.9.1.(CVE-2025-5455)","status":"published","published":"2025-07-11T11:08:50Z","modified":"2026-08-18T01:18:51.78978496Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-2545","title":"qt5-qtbase security update","description":"Qt is a software toolkit for developing applications.\r\n\r\nSecurity Fix(es):\n\nAn issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code.\n\nIf the function was called with malformed data, for example, an URL that\ncontained a \u0026quot;charset\u0026quot; parameter that lacked a value (such as\n\u0026quot;data:charset,\u0026quot;), and Qt was built with assertions enabled, then it would hit an assertion, resulting in a denial of service\n(abort).\n\nThis impacts Qt up to 5.15.18, 6.0.0-\u0026gt;6.5.8, 6.6.0-\u0026gt;6.8.3 and 6.9.0. This has been fixed in 5.15.19, 6.5.9, 6.8.4 and 6.9.1.(CVE-2025-5455)","status":"published","published":"2025-10-31T11:09:38Z","modified":"2026-08-18T01:19:16.509609171Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"RHSA-2025:11841","title":"Red Hat Security Advisory: qt5-qtbase security update","status":"published","published":"2025-07-29T10:07:21Z","modified":"2026-10-17T10:04:49Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:15.599955Z"},{"id":"RHSA-2025:9462","title":"Red Hat Security Advisory: qt5-qtbase security update","status":"published","published":"2025-06-25T10:06:25Z","modified":"2026-10-17T10:08:08Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"RHSA-2025:9486","title":"Red Hat Security Advisory: qt6-qtbase security update","status":"published","published":"2025-06-25T10:06:26Z","modified":"2026-10-17T10:08:09Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"RLSA-2025:9462","title":"Moderate: qt5-qtbase security update","description":"Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. \n\nSecurity Fix(es):\n\n* qt5: qt6: QtCore Assertion Failure Denial of Service (CVE-2025-5455)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-10-04T00:11:30.91642Z","modified":"2025-10-07T17:39:56.2295Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"RLSA-2025:9486","title":"Moderate: qt6-qtbase security update","description":"Qt is a software toolkit for developing applications.  This package contains base tools, like string, xml, and network handling.\n\nSecurity Fix(es):\n\n* qt5: qt6: QtCore Assertion Failure Denial of Service (CVE-2025-5455)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-10-03T19:56:45.27031Z","modified":"2025-10-03T20:19:22.102103Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"UBUNTU-CVE-2025-5455","description":"An issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code. If the function was called with malformed data, for example, an URL that contained a \"charset\" parameter that lacked a value (such as \"data:charset,\"), and Qt was built with assertions enabled, then it would hit an assertion, resulting in a denial of service (abort). This impacts Qt up to 5.15.18, 6.0.0-\u003e6.5.8, 6.6.0-\u003e6.8.3 and 6.9.0. This has been fixed in 5.15.19, 6.5.9, 6.8.4 and 6.9.1.","status":"published","published":"2025-06-02T09:15:00Z","modified":"2026-11-09T12:49:27.532147806Z","cvss":[{"version":"4.0","score":8.4,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H/R:U/RE:M/U:Clear","level":"high"}],"updated_at":"2026-11-09T13:27:42.046613Z"},{"id":"ALSA-2025:9462","title":"Moderate: qt5-qtbase security update","description":"Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt.   \n\nSecurity Fix(es):  \n\n  * qt5: qt6: QtCore Assertion Failure Denial of Service (CVE-2025-5455)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-06-24T00:00:00Z","modified":"2026-10-29T11:32:30.133697241Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"ALSA-2025:9486","title":"Moderate: qt6-qtbase security update","description":"Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling.  \n\nSecurity Fix(es):  \n\n  * qt5: qt6: QtCore Assertion Failure Denial of Service (CVE-2025-5455)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-06-24T00:00:00Z","modified":"2026-10-29T11:30:14.073386729Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"AZL-64349","title":"CVE-2025-5455 affecting package qtbase for versions less than 6.6.3-4","description":"An issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code.\n\n\n\nIf the function was called with malformed data, for example, an URL that\ncontained a \"charset\" parameter that lacked a value (such as\n\"data:charset,\"), and Qt was built with assertions enabled, then it would hit an assertion, resulting in a denial of service\n(abort).\n\n\n\nThis impacts Qt up to 5.15.18, 6.0.0-\u003e6.5.8, 6.6.0-\u003e6.8.3 and 6.9.0. This has been fixed in 5.15.19, 6.5.9, 6.8.4 and 6.9.1.","status":"published","published":"2025-06-02T09:15:21Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:21.518778Z"},{"id":"AZL-64361","title":"CVE-2025-5455 affecting package qt5-qtbase for versions less than 5.12.11-18","description":"An issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code.\n\nIf the function was called with malformed data, for example, an URL that\ncontained a \"charset\" parameter that lacked a value (such as\n\"data:charset,\"), and Qt was built with assertions enabled, then it would hit an assertion, resulting in a denial of service\n(abort).\n\nThis impacts Qt up to 5.15.18, 6.0.0-\u003e6.5.8, 6.6.0-\u003e6.8.3 and 6.9.0. This has been fixed in 5.15.19, 6.5.9, 6.8.4 and 6.9.1.","status":"published","published":"2025-06-02T09:15:21Z","modified":"2026-04-21T04:32:23.009513Z","updated_at":"2026-11-02T15:28:08.076947Z"},{"id":"CLSA-2026-1778107793","title":"qt5-qtbase: Fix of 3 CVEs","description":"- CVE-2025-5455: fix qDecodeDataUrl crash on malformed data URL with charset\n- CVE-2024-25580: fix KTX file reading buffer overflow\n- CVE-2024-39936: delay HTTP/2 communication until encrypted() can be\n  responded to (includes prerequisite to emit encrypted() on H2 path)","status":"published","published":"2026-05-06T22:50:01Z","modified":"2026-10-21T10:45:56.312701445Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CVE-2025-5455","description":"An issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code.\n\nIf the function was called with malformed data, for example, an URL that\ncontained a \"charset\" parameter that lacked a value (such as\n\"data:charset,\"), and Qt was built with assertions enabled, then it would hit an assertion, resulting in a denial of service\n(abort).\n\nThis impacts Qt up to 5.15.18, 6.0.0-\u003e6.5.8, 6.6.0-\u003e6.8.3 and 6.9.0. This has been fixed in 5.15.19, 6.5.9, 6.8.4 and 6.9.1.","status":"published","published":"2025-06-02T09:15:21Z","modified":"2026-04-16T04:35:48.947777875Z","updated_at":"2026-11-02T15:44:50.863921Z"},{"id":"MGASA-2025-0212","title":"Updated qtbase6 \u0026 qtbase5 packages fix security vulnerability","description":"An issue was found in the private API function qDecodeDataUrl() in\nQtCore, which is used in QTextDocument and QNetworkReply, and,\npotentially, in user code. If the function was called with malformed\ndata, for example, an URL that contained a \"charset\" parameter that\nlacked a value (such as \"data:charset,\"), and Qt was built with\nassertions enabled, then it would hit an assertion, resulting in a\ndenial of service (abort). This impacts Qt up to 5.15.18, 6.0.0-\u003e6.5.8,\n6.6.0-\u003e6.8.3 and 6.9.0.\n","status":"published","published":"2025-07-22T16:34:04Z","modified":"2026-04-16T04:42:09.034723801Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2025:15240-1","title":"libQt5Bootstrap-devel-static-32bit-5.15.17+kde122-2.1 on GA media","description":"These are all security issues fixed in the libQt5Bootstrap-devel-static-32bit-5.15.17+kde122-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-07-03T00:00:00Z","modified":"2026-03-23T04:53:32.57334Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"SUSE-SU-2025:02968-1","title":"Security update for libqt4","description":"This update for libqt4 fixes the following issues:\n\n- CVE-2021-45930: Fixed out-of-bounds write leading to DoS (bsc#1196654)\n- CVE-2023-32573: Fixed missing initialization of QtSvg QSvgFont m_unitsPerEm (bsc#1211298)\n- CVE-2023-32763: Fixed buffer overflow on QTextLayout during rendering of an SVG file with an image inside (bsc#1211798)\n- CVE-2023-34410: Fixed certificate validation not always considering whether the root of a chain is a configured CA certificate (bsc#1211994)\n- CVE-2023-37369: Fixed buffer overflow in QXmlStreamReader (bsc#1214327)\n- CVE-2023-38197: Fixed infinite loops in QXmlStreamReader (bsc#1213326)\n- CVE-2025-5455: Fixed denial of service when qDecodeDataUrl() is called with malformed data and assertions are enabled (bsc#1245609)\n","status":"published","published":"2025-08-25T06:20:49Z","modified":"2026-02-04T03:08:38.996619Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:03599-1","title":"Security update for qt6-base","description":"This update for qt6-base fixes the following issues:\n\n- CVE-2025-5455: processing of malformed data in `qDecodeDataUrl()` can trigger assertion and cause a crash\n  (bsc#1243958).\n- CVE-2025-30348: complex algorithm used in `encodeText` in QDom when processing XML data can cause low performance\n  (bsc#1239896).\n","status":"published","published":"2025-10-15T12:17:03Z","modified":"2026-03-23T04:48:05.862448Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:3723-1","title":"Security update for libqt5-qtbase","description":"This update for libqt5-qtbase fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2025-5455: processing of malformed data in `qDecodeDataUrl()` can trigger assertion and cause a crash\n  (bsc#1243958).\n- CVE-2025-30348: complex algorithm used in `encodeText` in QDom when processing XML data can cause low performance\n  (bsc#1239896).\n\nOther issues fixed:\n   \n- Initialize a member variable in `QObjectPrivate::Signal` that was uninitialized under some circumstances.\n- Fix a crash when parsing a particular glyph in a particular font.\n- Avoid repeatedly registering xsettings callbacks when switching cursor themes.\n- Check validity of RandR output info before using it.\n- Fix reparenting a window so it takes effect even if there are no other state changes to the window.\n","status":"published","published":"2025-10-22T11:22:11Z","modified":"2026-02-04T04:36:08.712623Z","updated_at":"2026-11-02T15:54:00.344164Z"}]}}