CVE-2024-25580

Name of the Vulnerable Software and Affected Versions Qt versions prior to 5.15.17 Qt versions 6.x prior to 6.2.12 Qt versions 6.3.x through 6.5.x prior to 6.5.5 Qt versions 6.6.x prior to 6.6.2

Description A buffer overflow and application crash can occur via a crafted KTX image file. The issue is related to the gui/util/qktxhandler.cpp component, which handles KTX image files. Exploitation of this issue may allow a remote attacker to cause a denial of service using a specially crafted KTX file.

Recommendations For Qt versions prior to 5.15.17, update to version 5.15.17 or later. For Qt versions 6.x prior to 6.2.12, update to version 6.2.12 or later. For Qt versions 6.3.x through 6.5.x prior to 6.5.5, update to version 6.5.5 or later. For Qt versions 6.6.x prior to 6.6.2, update to version 6.6.2 or later.