Heap-based Buffer Overflow in Qt's QTextMarkdownImporter Affects Multiple Versions

CVE-2025-3512

What is CVE-2025-3512?

A Heap-based Buffer Overflow vulnerability exists in QTextMarkdownImporter, which can be exploited by passing an incorrectly formatted markdown file to the importer. This could lead to unexpected behavior or code execution. The affected versions are Qt 6.8.0 to 6.8.4, with versions prior to 6.6.0 remaining unaffected. Users are advised to upgrade to Qt 6.8.4 or later to mitigate the risk.

References