OESA-2025-2874

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-2874

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2025-2874.json

JSON Data

https://api.osv.dev/v1/vulns/OESA-2025-2874

Upstream

CVE-2025-12385

Published

2025-12-30T12:16:39Z

Modified

2025-12-30T13:00:08.957495Z

Summary

qt5-qtdeclarative security update

Details

Security Fix(es):

Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation. This issue affects users of the Text component in Qt Quick. Missing validation of the width and height in the <img> tag could cause an application to become unresponsive.

This issue affects Qt: from 5.0.0 through 6.5.10, from 6.6.0 through 6.8.5, from 6.9.0 through 6.10.0.(CVE-2025-12385)

Database specific

{
    "severity": "Medium"
}

References

Affected packages

openEuler:22.03-LTS-SP3 / qt5-qtdeclarative

Package

Name: qt5-qtdeclarative
Purl: pkg:rpm/openEuler/qt5-qtdeclarative&distro=openEuler-22.03-LTS-SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.15.2-2.oe2203sp3

Ecosystem specific

{
    "src": [
        "qt5-qtdeclarative-5.15.2-2.oe2203sp3.src.rpm"
    ],
    "x86_64": [
        "qt5-qtdeclarative-5.15.2-2.oe2203sp3.x86_64.rpm",
        "qt5-qtdeclarative-debuginfo-5.15.2-2.oe2203sp3.x86_64.rpm",
        "qt5-qtdeclarative-debugsource-5.15.2-2.oe2203sp3.x86_64.rpm",
        "qt5-qtdeclarative-devel-5.15.2-2.oe2203sp3.x86_64.rpm"
    ],
    "aarch64": [
        "qt5-qtdeclarative-5.15.2-2.oe2203sp3.aarch64.rpm",
        "qt5-qtdeclarative-debuginfo-5.15.2-2.oe2203sp3.aarch64.rpm",
        "qt5-qtdeclarative-debugsource-5.15.2-2.oe2203sp3.aarch64.rpm",
        "qt5-qtdeclarative-devel-5.15.2-2.oe2203sp3.aarch64.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2025-2874.json"