CVE-2024-25580
MEDIUMQt <5.15.17, <6.2.12, <=6.5.5, <=6.6.2 - Buffer Overflow
Title source: llmDescription
An issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.12, 6.3.x through 6.5.x before 6.5.5, and 6.6.x before 6.6.2. A buffer overflow and application crash can occur via a crafted KTX image file.
References (3)
Core 3
Core References
Patch, Vendor Advisory
https://www.qt.io/blog/security-advisory-potential-buffer-overflow-when-reading-ktx-images
Mailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/[email protected]/message/SYE2NMN67DYHYJKLAKLGR64OYI7A63AH/
Mailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/[email protected]/message/ZWTGLKC3WBDHZ5OJRSEB2QUR7XXZDLZV/
Scores
CVSS v3
6.2
EPSS
0.0007
EPSS Percentile
21.9%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-120
Status
published
Products (1)
qt/qt
5.12.0 - 5.15.17
Published
Mar 27, 2024
Tracked Since
Feb 18, 2026