QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read (or division by zero). This is fixed in 5.15.19, 6.5.9, and 6.8.2.
CVSS Details
- CVSS 3.1 Base Score: 3.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qtconnectivity-opensource-srcUpgrade qt6-connectivity | May 15, 2025 | May 15, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 31, 2025 |
| Suse | — | Upgrade qt6-connectivity-private-develUpgrade qt6-connectivity-docs-qchUpgrade qt6-connectivity-examplesUpgrade qt6-connectivity-docs-htmlUpgrade qt6-connectivity-develUpgrade libQt6Bluetooth6Upgrade qt6-connectivityUpgrade libQt6Nfc6 | Jan 27, 2025 | Jan 25, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub