Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-5683

Fixed in a distro release EPSS <1%CVSS 5.1

When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash.  This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.

Published 2025-06-05 · CVE record · OSV

Products: qt

Distro releases

ReleasePackageFixed in
Debian:12qt6-imageformatsno fix
Debian:12qtimageformats-opensource-srcno fix
Debian:13qt6-imageformats6.8.2-4
Debian:13qtimageformats-opensource-src5.15.15-4
Debian:14qt6-imageformats6.8.2-4
Debian:14qtimageformats-opensource-src5.15.15-4
Ubuntu:16.04:LTSqtimageformats-opensource-srcno fix
Ubuntu:18.04:LTSqtimageformats-opensource-srcno fix
Ubuntu:20.04:LTSqtimageformats-opensource-srcno fix
Ubuntu:22.04:LTSqt6-imageformatsno fix
Ubuntu:22.04:LTSqtimageformats-opensource-srcno fix
Ubuntu:24.04:LTSqt6-imageformatsno fix
Ubuntu:24.04:LTSqtimageformats-opensource-srcno fix
Ubuntu:25.10qt6-imageformatsno fix
Ubuntu:25.10qtimageformats-opensource-srcno fix
Ubuntu:26.04:LTSqt6-imageformatsno fix
Ubuntu:26.04:LTSqtimageformats-opensource-srcno fix
Ubuntu:26.10qt6-imageformatsno fix
Ubuntu:26.10qtimageformats-opensource-srcno fix