Denial of Service Vulnerability in Qt Framework Affecting Multiple Versions

CVE-2025-5992

What is CVE-2025-5992?

A vulnerability exists within the Qt framework that may lead to a denial of service. This occurs when unexpected values are passed to the QColorTransferGenericFunction, particularly when a specially crafted ICC profile is provided to QColorSpace::fromICCProfile. Users running affected versions of the Qt framework (from 6.6.0 to 6.8.3 and 6.9.0 to 6.9.1) are at risk. The issue has been addressed in version 6.8.4 and 6.9.2, highlighting the importance of keeping the framework up to date to mitigate potential attacks.

References