CVE-2025-23050

LOW

Qt <6.8.2 - Memory Corruption

Title source: llm
STIX 2.1

Description

QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read (or division by zero). This is fixed in 5.15.19, 6.5.9, and 6.8.2.

References (2)

Core 2

Scores

CVSS v3 3.1
EPSS 0.0002
EPSS Percentile 6.5%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-125
Status published
Products (3)
Qt/Qt < 5.15.19
Qt/Qt 6.0.0 - 6.5.9
Qt/Qt 6.6.0 - 6.8.2
Published Oct 31, 2025
Tracked Since Feb 18, 2026