CVE-2025-12385
Fixed in a distro release EPSS <1%CVSS 8.7
Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation. This issue affects users of the Text component in Qt Quick. Missing validation of the width and height in the <img> tag could cause an application to become unresponsive. This issue affects Qt: from 5.0.0 through 6.5.10, from 6.6.0 through 6.8.5, from 6.9.0 through 6.10.0.
Products: qt
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | qt6-declarative | no fix |
| Debian 12 | qtdeclarative-opensource-src | no fix |
| Debian 12 | qtdeclarative-opensource-src-gles | no fix |
| Debian 13 | qt6-declarative | no fix |
| Debian 13 | qtdeclarative-opensource-src | no fix |
| Debian 13 | qtdeclarative-opensource-src-gles | no fix |
| Debian 14 | qt6-declarative | no fix |
| Debian 14 | qtdeclarative-opensource-src | 5.15.17+dfsg-4 |
| Debian 14 | qtdeclarative-opensource-src-gles | no fix |
| Ubuntu 16.04 LTS | qtdeclarative-opensource-src | no fix |
| Ubuntu 16.04 LTS | qtdeclarative-opensource-src-gles | no fix |
| Ubuntu 18.04 LTS | qtdeclarative-opensource-src | no fix |
| Ubuntu 20.04 LTS | qtdeclarative-opensource-src-gles | no fix |
| Ubuntu 22.04 LTS | qt6-declarative | no fix |
| Ubuntu 22.04 LTS | qtdeclarative-opensource-src-gles | no fix |
| Ubuntu 24.04 LTS | qt6-declarative | no fix |
| Ubuntu 24.04 LTS | qtdeclarative-opensource-src-gles | no fix |
| Ubuntu 25.10 | qt6-declarative | no fix |
| Ubuntu 25.10 | qtdeclarative-opensource-src | no fix |
| Ubuntu 25.10 | qtdeclarative-opensource-src-gles | no fix |
| Ubuntu 26.04 LTS | qt6-declarative | no fix |
| Ubuntu 26.04 LTS | qtdeclarative-opensource-src-gles | no fix |
| Ubuntu 26.10 | qt6-declarative | no fix |
| Ubuntu 26.10 | qtdeclarative-opensource-src-gles | no fix |
| Ubuntu Pro 20.04 LTS | qtdeclarative-opensource-src | 5.12.8-0ubuntu1+esm1 |
| Ubuntu Pro 22.04 LTS | qtdeclarative-opensource-src | 5.15.3+dfsg-1ubuntu0.1~esm1 |
| Ubuntu Pro 24.04 LTS | qtdeclarative-opensource-src | 5.15.13+dfsg-1ubuntu0.1+esm1 |