ICNS Image File Crash Vulnerability in Qt Software
CVE-2025-5683

5.1MEDIUM

Key Information:

Vendor

The Qt Company

Status
Qt
Vendor
CVE Published:
5 June 2025

What is CVE-2025-5683?

A vulnerability exists in the QImage module of the Qt framework, triggered when loading specially crafted ICNS format image files. This flaw can lead to application crashes, compromising the stability and reliability of software that utilizes affected versions of Qt. The vulnerability affects Qt versions from 6.3.0 through 6.5.9, as well as 6.6.0 through 6.8.4 and 6.9.0. Patch updates have been released to mitigate this issue, specifically in versions 6.5.10, 6.8.5, and 6.9.1.

Affected Version(s)

Qt 6.3.0 <= 6.5.9

Qt 6.6.0 <= 6.8.4

Qt 6.9.0

References

https://issues.oss-fuzz.com/issues/415350704
https://codereview.qt-project.org/c/qt/qtimageformats/+/6...

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

OSS Fuzz
.
CVE-2025-5683 : ICNS Image File Crash Vulnerability in Qt Software