Skip to content
CVE PROGRAM SOURCE RECORD1.8 Low

CVE-2025-14575

Uncontrolled Search Path Element in Qt Network OpenSSL TLS backend allows rogue CA certificate loading

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
TQtC

Description

An Uncontrolled Search Path Element vulnerability in the OpenSSL TLS backend of Qt Network (qtbase) in Qt Qt Framework (Unix) allows a local attacker to load a rogue CA certificate as a trusted system authority via a crafted certificate file placed in the application's working directory.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Qt Qt

Default version status: unaffected

  • 5.0.0 to ≤ 5.15.19affected
  • 6.0.0 to ≤ 6.5.9affected
  • 6.6.0 to ≤ 6.8.3affected
  • 6.9.0 to ≤ 6.9.1affected

References