Skip to content
CVE PROGRAM SOURCE RECORD2.3 Low

CVE-2025-5992

Passing values outside of expected range to QColorTransferGenericFunction can cause a denial of service

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
TQtC

Description

When passing values outside of the expected range to QColorTransferGenericFunction it can cause a denial of service, for example, this can happen when passing a specifically crafted ICC profile to QColorSpace::fromICCProfile. This issue affects Qt from 6.6.0 through 6.8.3, from 6.9.0 through 6.9.1. This is fixed in 6.8.4 and 6.9.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Qt Qt

Default version status: unaffected

  • 6.0.0 to < 6.6.0unaffected
  • 6.6.0 to ≤ 6.8.3affected
  • 6.8.4 to ≤ 6.8.3unaffected
  • 6.9.0 to ≤ 6.9.1affected
  • 6.9.2 to ≤ 6.9.1unaffected

References