An issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code.
If the function was called with malformed data, for example, an URL that contained a "charset" parameter that lacked a value (such as "data:charset,"), and Qt was built with assertions enabled, then it would hit an assertion, resulting in a denial of service (abort).
This impacts Qt up to 5.15.18, 6.0.0->6.5.8, 6.6.0->6.8.3 and 6.9.0. This has been fixed in 5.15.19, 6.5.9, 6.8.4 and 6.9.1.
CVSS Details
- CVSS 4.0 Base Score: 8.4 (HIGH)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:U/V:X/RE:M/U:Clear)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade qt5-qtbase-commonUpgrade qt5-qtbase-develUpgrade qt5-qtbase-postgresqlUpgrade qt5-qtbase-examplesUpgrade qt5-qtbase-guiUpgrade qt5-qtbase-odbcUpgrade qt5-qtbase-mysqlUpgrade qt5-qtbase-staticUpgrade qt5-qtbase-private-develUpgrade qt5-qtbase | Jul 1, 2025 | Jun 2, 2025 |
| Debian | — | Upgrade qt6-baseUpgrade qtbase-opensource-srcNo solution exists | Jun 4, 2025 | Jun 2, 2025 |
| Oracle_linux | — | Upgrade qt6-qtbase-develUpgrade qt6-qtbaseUpgrade qt5-qtbase-staticUpgrade qt5-qtbase-commonUpgrade qt5-qtbase-private-develUpgrade qt6-qtbase-guiUpgrade qt6-qtbase-staticUpgrade qt6-qtbase-examplesUpgrade qt5-qtbase-develUpgrade qt5-qtbase-examplesUpgrade qt6-qtbase-odbcUpgrade qt6-qtbase-mysqlUpgrade qt6-qtbase-postgresqlUpgrade qt5-qtbase-guiUpgrade qt6-qtbase-commonUpgrade qt5-qtbase-postgresqlUpgrade qt5-qtbase-mysqlUpgrade qt5-qtbase-odbcUpgrade qt5-qtbaseUpgrade qt6-qtbase-private-devel | Jun 30, 2025 | Jun 2, 2025 |
| Redhat_linux | — | Upgrade qt5-qtbase-guiUpgrade qt5-qtbase-commonUpgrade qt6-qtbase-postgresqlUpgrade qt6-qtbase-gui-debuginfoUpgrade qt5-qtbase-mysqlUpgrade qt5-qtbase-tests-debuginfoUpgrade qt6-qtbase-private-develUpgrade qt5-qtbase-mysql-debuginfoNo solution existsUpgrade qt5-qtbase-gui-debuginfoUpgrade qt5-qtbase-debuginfoUpgrade qt6-qtbase-postgresql-debuginfoUpgrade qt6-qtbase-examplesUpgrade qt5-qtbase-odbcUpgrade qt6-qtbase-mysqlUpgrade qt6-qtbase-develUpgrade qt6-qtbase-debugsourceUpgrade qt5-qtbase-postgresql-debuginfoUpgrade qt5-qtbase-develUpgrade qt6-qtbase-commonUpgrade qt6-qtbaseUpgrade qt6-qtbase-staticUpgrade qt6-qtbase-tests-debuginfoUpgrade qt6-qtbase-mysql-debuginfoUpgrade qt5-qtbase-odbc-debuginfoUpgrade qt6-qtbase-debuginfoUpgrade qt5-qtbase-staticUpgrade qt5-qtbase-examplesUpgrade qt5-qtbaseUpgrade qt5-qtbase-examples-debuginfoUpgrade qt6-qtbase-examples-debuginfoUpgrade qt5-qtbase-devel-debuginfoUpgrade qt6-qtbase-odbcUpgrade qt5-qtbase-debugsourceUpgrade qt6-qtbase-odbc-debuginfoUpgrade qt6-qtbase-devel-debuginfoUpgrade qt5-qtbase-postgresqlUpgrade qt6-qtbase-guiUpgrade qt5-qtbase-private-devel | Jun 26, 2025 | Jun 2, 2025 |
| Rocky_linux | — | Upgrade qt5-qtbase-debugsourceUpgrade qt5-qtbase-odbcUpgrade qt5-qtbase-debuginfoUpgrade qt6-qtbase-private-develUpgrade qt6-qtbase-postgresql-debuginfoUpgrade qt6-qtbase-gui-debuginfoUpgrade qt5-qtbase-examplesUpgrade qt5-qtbase-staticUpgrade qt6-qtbase-debuginfoUpgrade qt5-qtbase-gui-debuginfoUpgrade qt5-qtbase-postgresqlUpgrade qt6-qtbase-mysql-debuginfoUpgrade qt5-qtbaseUpgrade qt6-qtbase-mysqlUpgrade qt6-qtbase-debugsourceUpgrade qt5-qtbase-private-develUpgrade qt5-qtbase-mysql-debuginfoUpgrade qt6-qtbaseUpgrade qt6-qtbase-postgresqlUpgrade qt6-qtbase-guiUpgrade qt6-qtbase-examples-debuginfoUpgrade qt6-qtbase-examplesUpgrade qt6-qtbase-odbcUpgrade qt5-qtbase-mysqlUpgrade qt5-qtbase-odbc-debuginfoUpgrade qt6-qtbase-develUpgrade qt5-qtbase-develUpgrade qt5-qtbase-examples-debuginfoUpgrade qt6-qtbase-staticUpgrade qt5-qtbase-guiUpgrade qt6-qtbase-odbc-debuginfoUpgrade qt6-qtbase-devel-debuginfoUpgrade qt5-qtbase-postgresql-debuginfoUpgrade qt5-qtbase-devel-debuginfo | Oct 6, 2025 | Oct 3, 2025 |
| Suse | — | Upgrade libqt5gui-develUpgrade qt4-x11-toolsUpgrade libqt4-private-headers-develUpgrade libqt4-x11-32bitUpgrade libqt5concurrent5-32bitUpgrade libqt5sql5-postgresqlUpgrade libqt5widgets5-32bitUpgrade libqt5sql5Upgrade libqt5sql5-unixodbcUpgrade libqt5printsupport-private-headers-develUpgrade libQt6PrintSupport6Upgrade qt6-platformsupport-private-develUpgrade qt6-concurrent-develUpgrade qt6-core-private-develUpgrade libqt5core-devel-32bitUpgrade qt6-docs-commonUpgrade qt6-opengl-develUpgrade qt6-sql-sqliteUpgrade libqt5kmssupport-devel-staticUpgrade libqt5opengl-develUpgrade libqt5core-private-headers-develUpgrade libqt5bootstrap-devel-staticUpgrade libqt5concurrent-develUpgrade libqt5platformheaders-develUpgrade libqt5test-devel-32bitUpgrade qt6-base-private-develUpgrade libqt4-sqlUpgrade libqt5printsupport5Upgrade libqt4-x11Upgrade libqt5concurrent5Upgrade qt6-test-develUpgrade libqt5network5-32bitUpgrade libqt5network5Upgrade qt6-base-common-develUpgrade qt6-sql-postgresqlUpgrade libqt5opengl5Upgrade libqt5concurrent-devel-32bitUpgrade libqt5core5Upgrade libqt5widgets-private-headers-develUpgrade libqt5network-develUpgrade libqt4-sql-mysqlUpgrade libqt5-qtbase-platformtheme-gtk3Upgrade qt6-platformtheme-xdgdesktopportalUpgrade qt6-printsupport-develUpgrade qt6-kmssupport-devel-staticUpgrade libqt5printsupport-devel-32bitUpgrade libqt5core-develUpgrade qt6-networkinformation-nmUpgrade libqt5printsupport-develUpgrade libQt6Gui6Upgrade qt6-widgets-private-develUpgrade libqt5sql5-postgresql-32bitUpgrade libqt5gui5Upgrade libqt5platformsupport-devel-static-32bitUpgrade libqt5kmssupport-private-headers-develUpgrade libqt5test-private-headers-develUpgrade qt6-sql-develUpgrade qt6-networkinformation-glibUpgrade qt6-base-docs-htmlUpgrade libqt5dbus-devel-32bitUpgrade libqt4Upgrade libqt4-32bitUpgrade libqt5sql5-sqlite-32bitUpgrade libqt5opengl-private-headers-develUpgrade qt6-network-private-develUpgrade qt6-network-tlsUpgrade qt6-sql-private-develUpgrade libqt5core5-32bitUpgrade libQt6Core6Upgrade qt6-core-develUpgrade libQt6Concurrent6Upgrade qt6-widgets-develUpgrade libqt5gui-devel-32bitUpgrade qt6-printsupport-private-develUpgrade libQt6OpenGLWidgets6Upgrade libQt6Test6Upgrade libqt5printsupport5-32bitUpgrade qt6-kmssupport-private-develUpgrade libqt4-sql-sqliteUpgrade libqt4-develUpgrade qt6-sql-unixODBCUpgrade qt6-exampleicons-devel-staticUpgrade libqt5network-private-headers-develUpgrade libqt5gui-private-headers-develUpgrade libQt6Widgets6Upgrade libqt5sql5-unixodbc-32bitUpgrade libqt5sql-devel-32bitUpgrade qt6-base-examplesUpgrade qt6-gui-private-develUpgrade libqt5widgets-devel-32bitUpgrade libqt5test-develUpgrade libqt5opengl5-32bitUpgrade libqt5-qtbase-private-headers-develUpgrade libqt4-sql-32bitUpgrade libqt4-devel-doc-dataUpgrade qt6-network-develUpgrade libQt6Xml6Upgrade libQt6OpenGL6Upgrade libQt6DBus6Upgrade libqt5-qtbase-develUpgrade libqt5openglextensions-devel-static-32bitUpgrade libqt5network-devel-32bitUpgrade libqt5-qtbase-examplesUpgrade libqt5-qtbase-common-develUpgrade qt6-sql-mysqlUpgrade qt6-opengl-private-develUpgrade libQt6Sql6Upgrade libqt5xml5-32bitUpgrade libqt5xml-devel-32bitUpgrade qt6-dbus-develUpgrade libqt5dbus-private-headers-develUpgrade qt6-openglwidgets-develUpgrade libqt5-qtbase-platformtheme-xdgdesktopportalUpgrade qt6-base-docs-qchUpgrade qt6-xml-private-develUpgrade libqt5dbus5Upgrade libqt4-devel-docUpgrade qt6-dbus-private-develUpgrade libQt6Network6Upgrade libqt5xml5Upgrade libqt5widgets5Upgrade libqt5gui5-32bitUpgrade qt6-printsupport-cupsUpgrade qt6-xml-develUpgrade libqt5widgets-develUpgrade libqt5sql5-sqliteUpgrade libqt5sql5-32bitUpgrade libqt4-qt3supportUpgrade libqt5test5-32bitUpgrade libqt4-qt3support-32bitUpgrade libqt5xml-develUpgrade libqt5sql5-mysqlUpgrade libqt5sql-develUpgrade libqt5platformsupport-private-headers-develUpgrade qt6-gui-develUpgrade libqt5sql-private-headers-develUpgrade libqt5opengl-devel-32bitUpgrade libqt5dbus-develUpgrade qt6-test-private-develUpgrade qt6-platformsupport-devel-staticUpgrade libqt5bootstrap-devel-static-32bitUpgrade qt6-platformtheme-gtk3Upgrade libqt5test5Upgrade libqt5platformsupport-devel-staticUpgrade libqt5openglextensions-devel-staticUpgrade libqt5-qtbase-examples-32bitUpgrade libqt5sql5-mysql-32bitUpgrade libqt5dbus5-32bitUpgrade qt6-base-devel | Aug 26, 2025 | Jun 26, 2025 |
| Ubuntu | — | No solution exists | Jul 25, 2025 | Jun 2, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub