PT-2025-16037
CVE-2025-3512
·
Published
2025-04-11
·
Updated
2026-07-29
Description by
CVSS 4.0
4.8
MediumMetricsAV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/U:Clear
Name of the Vulnerable Software and Affected Versions:
Qt versions 6.8.0 through 6.8.4
Description:
There is a Heap-based Buffer Overflow vulnerability in
QTextMarkdownImporter. This requires an incorrectly formatted markdown file to be passed to QTextMarkdownImporter to trigger the overflow.Recommendations:
For Qt versions 6.8.0 through 6.8.3, update to version 6.8.4 or later to resolve the issue.
For Qt versions prior to 6.8.0, no action is required as these versions are not affected.
As a temporary workaround, consider restricting the use of
QTextMarkdownImporter until a patch is available. Found an issue in the description? Have something to add? Feel free to write us 👾