CVE-2025-5683

When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.

References

Affected packages

Git / github.com/qt/qtbase

Affected ranges

Type

GIT

Repo

https://github.com/qt/qtbase

Events

Introduced

25986746947798e1a22d0830d3bcb11a55fcd3ae

Fixed

2ad23cd72d5f122f88ce95792a4323d639c27d25

Database specific

{
    "versions": [
        {
            "introduced": "6.9.0"
        },
        {
            "fixed": "6.9.1"
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-5683.json"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "6.3.0"
            },
            {
                "fixed": "6.5.10"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "6.6.0"
            },
            {
                "fixed": "6.8.5"
            }
        ]
    }
]