> CVE-2025-5455

« BACK_TO_HOME
PUBLISHED
2025-06-02 09:15
MODIFIED
2025-06-02 17:32
EPSS (Prob. Exploit)
0.38%
Top 68.8%
DATA SOURCES:
NVD 🔗 2025-10-18 RED HAT 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-10-25 GITHUB 🔗 2026-11-11 MSRC 🔗 2026-05-01

> DESCRIPTION

An issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code. If the function was called with malformed data, for example, an URL that contained a "charset" parameter that lacked a value (such as "data:charset,"), and Qt was built with assertions enabled, then it would hit an assertion, resulting in a denial of service (abort). This impacts Qt up to 5.15.18, 6.0.0->6.5.8, 6.6.0->6.8.3 and 6.9.0. This has been fixed in 5.15.19, 6.5.9, 6.8.4 and 6.9.1.

> AFFECTED_PRODUCTS

Red Hat - Red Hat Enterprise Linux 10
Version: 6.8.1
Red Hat - Red Hat Enterprise Linux 9
Version: 5.15.9
Red Hat - Red Hat Enterprise Linux 9.4 Extended Update Support
Version: 5.15.9

> RED HAT SECURITY ADVISORIES

Red Hat Security Advisory: qt5-qtbase security update
An update for qt5-qtbase is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vu...
Red Hat Security Advisory: qt5-qtbase security update
An update for qt5-qtbase is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System...
Red Hat Security Advisory: qt6-qtbase security update
An update for qt6-qtbase is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring Syste...

> RED HAT SEVERITY ASSESSMENT

THREAT SEVERITY
Moderate

> GITHUB SECURITY ADVISORY

GHSA-q2hg-643c-gw8h HIGH

Withdrawn Advisory: Apache Airflow: RCE by race condition in example_xcom dag

AFFECTED PACKAGES:
PIP / apache-airflow
< 3.2.0
Fixed in: 3.2.0

> HISTORIQUE DES MODIFICATIONS

Première apparition
02/06/2025 09:15
Source: NVD
📊 ENRICHISSEMENT 18/10/2025 15:04
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
📊 ENRICHISSEMENT 18/10/2025 12:14
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
N/A
Nouvelle valeur:
{ "threat_severity": "Moderate", "severity_scale": null }
📊 ENRICHISSEMENT 18/10/2025 12:14
REDHAT
Champ modifié: Red Hat
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 3 Dernière mise à jour: 1 year ago
« BACK_TO_HOME