{"id":"CVE-2025-5683","aliases":["DEBIAN-CVE-2025-5683","EUVD-2025-16968","GHSA-5mw2-w8pc-m6p6","MGASA-2025-0208","OESA-2025-1708","OESA-2025-1709","OESA-2025-1794","OESA-2025-2492","OESA-2025-2493","OESA-2025-2494","OESA-2025-2495","OESA-2025-2496","OESA-2025-2581","UBUNTU-CVE-2025-5683"],"status":"published","title":"When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash...","description":"When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. \n\nThis issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.","severity":{"version":"4.0","score":5.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00245,"percentile":0.15814,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-770"],"published":"2025-06-05T05:31:13Z","modified":"2026-10-28T20:16:12Z","fixes":[{"ecosystem":"Debian:13","package":"qt6-imageformats","fixed_in":["6.8.2-4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"qt6-imageformats","fixed_in":["6.8.2-4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"qtimageformats-opensource-src","fixed_in":["5.15.15-4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"qtimageformats-opensource-src","fixed_in":["5.15.15-4"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"qtimageformats6","fixed_in":["6.4.1-1.1.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"qt6-qtimageformats","fixed_in":["6.5.2-2.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"qt6-qtimageformats","fixed_in":["6.5.2-2.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP2","package":"qt6-qtimageformats","fixed_in":["6.5.2-2.oe2403sp2"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"qt5-qtimageformats","fixed_in":["5.15.10-2.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"qt5-qtimageformats","fixed_in":["5.11.1-8.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"qt5-qtimageformats","fixed_in":["5.15.2-2.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"qt5-qtimageformats","fixed_in":["5.15.2-2.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"qt5-qtimageformats","fixed_in":["5.15.10-2.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP2","package":"qt5-qtimageformats","fixed_in":["5.15.10-2.oe2403sp2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"qt6-imageformats","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.10.2-1","6.10.2-2","6.10.2-3","6.11.2-1","6.4.2-1","6.4.2-2","6.4.2-3","6.4.2-4","6.4.2-5","6.6.0-1","6.6.1-1","6.6.2-1","6.6.2-2","6.7.2-1","6.7.2-2","6.8.2-1","6.8.2-2","6.8.2-3","6.8.2-4","6.9.1-1","6.9.1-2","6.9.2-1","6.9.2-2","6.9.2-3"]},{"source":"osv","ecosystem":"Debian:13","package":"qt6-imageformats","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.2-4"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"qt6-imageformats","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.2-4"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"qtimageformats-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.10-1","5.15.10-2","5.15.12-1","5.15.13-1","5.15.13-2","5.15.15-1","5.15.15-2","5.15.15-3","5.15.15-4","5.15.17-1","5.15.17-2","5.15.18-1","5.15.19-1","5.15.19-2","5.15.8-2","5.15.9-1"]},{"source":"osv","ecosystem":"Debian:13","package":"qtimageformats-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.15-4"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"qtimageformats-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.15-4"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"qtimageformats6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.1-1.1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"qt6-qtimageformats","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.2-2.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"qt6-qtimageformats","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.2-2.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"qt6-qtimageformats","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.2-2.oe2403sp2"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"qt5-qtimageformats","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.10-2.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"qt5-qtimageformats","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.11.1-8.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"qt5-qtimageformats","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.2-2.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"qt5-qtimageformats","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.2-2.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"qt5-qtimageformats","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.10-2.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"qt5-qtimageformats","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.10-2.oe2403sp2"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"qtimageformats-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.2-2build1","5.5.1-2build1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"qtimageformats-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.9.1-1","5.9.2-1","5.9.2-2","5.9.3-1ubuntu1","5.9.4-0ubuntu1","5.9.5-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"qtimageformats-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.12.4-1","5.12.5-1","5.12.5-1build1","5.12.8-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"qt6-imageformats","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.2-2","6.2.4-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"qtimageformats-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.2-2","5.15.2-2build1","5.15.3-1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"qt6-imageformats","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.4.2-4","6.4.2-5","6.4.2-5build1","6.4.2-5build2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"qtimageformats-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.10-2","5.15.12-1","5.15.12-1build1","5.15.12-1build2","5.15.13-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"qt6-imageformats","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.3-0ubuntu1","6.9.2-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"qtimageformats-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.15-3","5.15.15-4","5.15.17-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"qt6-imageformats","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.10.2-1","6.10.2-3","6.11.2-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"qtimageformats-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.18-1","5.15.19-2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"qt6-imageformats","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.9.2-1","6.9.2-3","6.10.2-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"qtimageformats-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.17-1","5.15.17-2","5.15.18-1"]}],"products":[{"vendor":"qt","product":"qt"},{"vendor":"the qt company","product":"qt"}],"references":[{"url":"https://issues.oss-fuzz.com/issues/415350704","tags":["Issue Tracking","Patch","fix","report"]},{"url":"https://codereview.qt-project.org/c/qt/qtimageformats/+/644548","tags":["Patch","fix","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-5683","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-5mw2-w8pc-m6p6"},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-5683","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0208.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34395","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D3F6LZUJWFANK7X5A65ECKBPB2KQ2DCO/","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1708","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1709","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1794","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2492","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2493","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2494","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2495","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2496","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2581","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-5683","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-5683","tags":["report"]},{"url":"https://github.com/qt/qtimageformats/commit/efd332516f510144927121fa749ce819b82ec633","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2025-5683","description":"When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. \n\nThis issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.","status":"published","published":"2025-06-05T05:31:13.926Z","modified":"2026-07-29T07:35:59.874Z","cvss":[{"version":"4.0","score":5.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L","level":"medium","assessor":"cna"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:32:29.97618Z"}],"euvd":[{"id":"EUVD-2025-16968","description":"When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. \n\nThis issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.","status":"published","published":"2025-06-05T05:31:13Z","modified":"2026-07-29T07:35:59Z","cvss":[{"version":"4.0","score":5.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L","level":"medium"}],"updated_at":"2026-11-02T18:02:30.59681Z"}],"ghsa":[{"id":"GHSA-5mw2-w8pc-m6p6","title":"When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash...","description":"When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.","status":"published","published":"2025-06-05T06:30:27Z","modified":"2025-10-15T18:31:49Z","cvss":[{"version":"4.0","score":5.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T15:04:00.063131Z"}],"nvd":[{"id":"CVE-2025-5683","description":"When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. \n\nThis issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.","status":"published","published":"2025-06-05T06:15:27.517Z","modified":"2026-07-29T09:16:28.807Z","cvss":[{"version":"4.0","score":5.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:11:10.8732Z"}],"osv":[{"id":"CVE-2025-5683","description":"When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. \n\nThis issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.","status":"published","published":"2025-06-05T06:15:27.517Z","modified":"2026-10-24T10:49:52.439571851Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:51.190588Z"},{"id":"DEBIAN-CVE-2025-5683","description":"When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash.   This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.","status":"published","published":"2025-06-05T06:15:27.517Z","modified":"2026-09-01T20:04:29.930353577Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:47.697959Z"},{"id":"OESA-2025-1708","title":"qt6-qtimageformats security update","description":"Security Fix(es):\n\nWhen loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.(CVE-2025-5683)","status":"published","published":"2025-07-04T11:08:48Z","modified":"2026-08-18T01:18:23.340511894Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1709","title":"qt6-qtimageformats security update","description":"Security Fix(es):\n\nWhen loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.(CVE-2025-5683)","status":"published","published":"2025-07-04T11:08:48Z","modified":"2026-08-18T01:18:23.349007065Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1794","title":"qt6-qtimageformats security update","description":"Security Fix(es):\n\nWhen loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.(CVE-2025-5683)","status":"published","published":"2025-07-11T11:08:52Z","modified":"2026-08-18T01:18:23.263875794Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-2492","title":"qt5-qtimageformats security update","description":"The core Qt Gui library by default supports reading and writing image files of the most common file formats: PNG, JPEG, BMP, GIF and a few more, ref. Reading and Writing Image Files. The Qt Image Formats add-on module provides optional support for other image file formats.\r\n\r\nSecurity Fix(es):\n\nWhen loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.(CVE-2025-5683)","status":"published","published":"2025-10-24T11:09:35Z","modified":"2026-08-18T01:19:15.210602296Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"OESA-2025-2493","title":"qt5-qtimageformats security update","description":"The core Qt Gui library by default supports reading and writing image files of the most common file formats: PNG, JPEG, BMP, GIF and a few more, ref. Reading and Writing Image Files. The Qt Image Formats add-on module provides optional support for other image file formats.\r\n\r\nSecurity Fix(es):\n\nWhen loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.(CVE-2025-5683)","status":"published","published":"2025-10-24T11:09:35Z","modified":"2026-08-18T01:19:15.152113558Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"OESA-2025-2494","title":"qt5-qtimageformats security update","description":"The core Qt Gui library by default supports reading and writing image files of the most common file formats: PNG, JPEG, BMP, GIF and a few more, ref. Reading and Writing Image Files. The Qt Image Formats add-on module provides optional support for other image file formats.\r\n\r\nSecurity Fix(es):\n\nWhen loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.(CVE-2025-5683)","status":"published","published":"2025-10-24T11:09:35Z","modified":"2026-08-18T01:19:15.174722227Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"OESA-2025-2495","title":"qt5-qtimageformats security update","description":"The core Qt Gui library by default supports reading and writing image files of the most common file formats: PNG, JPEG, BMP, GIF and a few more, ref. Reading and Writing Image Files. The Qt Image Formats add-on module provides optional support for other image file formats.\r\n\r\nSecurity Fix(es):\n\nWhen loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.(CVE-2025-5683)","status":"published","published":"2025-10-24T11:09:35Z","modified":"2026-08-18T01:19:15.262277547Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"OESA-2025-2496","title":"qt5-qtimageformats security update","description":"The core Qt Gui library by default supports reading and writing image files of the most common file formats: PNG, JPEG, BMP, GIF and a few more, ref. Reading and Writing Image Files. The Qt Image Formats add-on module provides optional support for other image file formats.\r\n\r\nSecurity Fix(es):\n\nWhen loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.(CVE-2025-5683)","status":"published","published":"2025-10-24T11:09:35Z","modified":"2026-08-18T01:19:15.361853861Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"OESA-2025-2581","title":"qt5-qtimageformats security update","description":"The core Qt Gui library by default supports reading and writing image files of the most common file formats: PNG, JPEG, BMP, GIF and a few more, ref. Reading and Writing Image Files. The Qt Image Formats add-on module provides optional support for other image file formats.\r\n\r\nSecurity Fix(es):\n\nWhen loading a specifically crafted ICNS format image file in QImage, it will trigger a crash. This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, and 6.9.0. This is fixed in 6.5.10, 6.8.5, and 6.9.1.(CVE-2025-5683)","status":"published","published":"2025-10-31T11:09:40Z","modified":"2026-08-18T01:19:17.062229291Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"UBUNTU-CVE-2025-5683","description":"When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.","status":"published","published":"2025-06-05T06:15:00Z","modified":"2026-10-28T20:16:12.980393674Z","cvss":[{"version":"4.0","score":5.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L","level":"medium"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:55:50.817402Z"},{"id":"MGASA-2025-0208","title":"Updated qtimageformats6 packages fix security vulnerabilities","description":"Loading a specifically-crafted ICNS format image file in QImage\nwill trigger a crash. This issue affects Qt from versions 6.3.0\nthrough 6.5.9, from 6.6.0 through 6.8.4, 6.9.0.\n","status":"published","published":"2025-07-15T02:49:53Z","modified":"2026-04-16T04:42:23.688415795Z","updated_at":"2026-11-02T15:49:43.178336Z"}]}}