OESA-2025-2870

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-2870

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2025-2870.json

JSON Data

https://api.osv.dev/v1/vulns/OESA-2025-2870

Upstream

CVE-2025-12385

Published

2025-12-30T12:16:36Z

Modified

2025-12-30T13:00:09.421561Z

Summary

qt5-qtdeclarative security update

Details

Security Fix(es):

Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation. This issue affects users of the Text component in Qt Quick. Missing validation of the width and height in the <img> tag could cause an application to become unresponsive.

This issue affects Qt: from 5.0.0 through 6.5.10, from 6.6.0 through 6.8.5, from 6.9.0 through 6.10.0.(CVE-2025-12385)

Database specific

{
    "severity": "Medium"
}

References

Affected packages

openEuler:22.03-LTS-SP4 / qt5-qtdeclarative

Package

Name: qt5-qtdeclarative
Purl: pkg:rpm/openEuler/qt5-qtdeclarative&distro=openEuler-22.03-LTS-SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.15.2-2.oe2203sp4

Ecosystem specific

{
    "aarch64": [
        "qt5-qtdeclarative-5.15.2-2.oe2203sp4.aarch64.rpm",
        "qt5-qtdeclarative-debuginfo-5.15.2-2.oe2203sp4.aarch64.rpm",
        "qt5-qtdeclarative-debugsource-5.15.2-2.oe2203sp4.aarch64.rpm",
        "qt5-qtdeclarative-devel-5.15.2-2.oe2203sp4.aarch64.rpm"
    ],
    "src": [
        "qt5-qtdeclarative-5.15.2-2.oe2203sp4.src.rpm"
    ],
    "x86_64": [
        "qt5-qtdeclarative-5.15.2-2.oe2203sp4.x86_64.rpm",
        "qt5-qtdeclarative-debuginfo-5.15.2-2.oe2203sp4.x86_64.rpm",
        "qt5-qtdeclarative-debugsource-5.15.2-2.oe2203sp4.x86_64.rpm",
        "qt5-qtdeclarative-devel-5.15.2-2.oe2203sp4.x86_64.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2025-2870.json"