CVE-2025-5683

MediumCVSS 5.5

Published: 05/06/2025(UTC)Updated: 29/07/2026(UTC)Translated: 29/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

11th percentile - higher than 11% of all known CVEs

Summary

A vulnerability in Qt causes a crash when loading a specially crafted ICNS image file via QImage. Affects Qt versions 6.3.0 through 6.5.9, 6.6.0 through 6.8.4, and 6.9.0. Fixed in 6.5.10, 6.8.5, and 6.9.1.

Risk Assessment

An attacker can remotely cause application crashes by providing a crafted ICNS file, potentially leading to denial of service.

Recommendation

Upgrade Qt to version 6.5.10, 6.8.5, or 6.9.1.

Original NVD description (English source)

When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.