The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
When passing values outside of the expected range to QColorTransferGenericFunction it can cause a denial of service, for example, this can happen when passing a specifically crafted ICC profile to QColorSpace::fromICCProfile.
This issue affects Qt from 6.6.0 through 6.8.3, from 6.9.0 through 6.9.1. This is fixed in 6.8.4 and 6.9.2.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qt6-base | Jul 14, 2025 | Jul 11, 2025 |
| Freebsd | — | Upgrade qt6-base | Dec 10, 2025 | Aug 28, 2025 |
| Suse | — | Upgrade qt6-xml-private-develUpgrade qt6-sql-private-develUpgrade qt6-base-docs-htmlUpgrade qt6-network-private-develUpgrade qt6-concurrent-develUpgrade qt6-test-develUpgrade qt6-sql-postgresqlUpgrade qt6-kmssupport-private-develUpgrade qt6-network-tlsUpgrade qt6-docs-commonUpgrade qt6-printsupport-private-develUpgrade libQt6Concurrent6Upgrade qt6-printsupport-develUpgrade libQt6Xml6Upgrade libQt6DBus6Upgrade qt6-base-private-develUpgrade libQt6PrintSupport6Upgrade libQt6Test6Upgrade libQt6Core6Upgrade qt6-printsupport-cupsUpgrade qt6-network-develUpgrade qt6-sql-develUpgrade qt6-sql-sqliteUpgrade qt6-xml-develUpgrade qt6-exampleicons-devel-staticUpgrade qt6-core-develUpgrade libQt6Widgets6Upgrade qt6-opengl-develUpgrade qt6-sql-unixODBCUpgrade qt6-platformtheme-xdgdesktopportalUpgrade qt6-networkinformation-glibUpgrade libQt6Gui6Upgrade qt6-base-common-develUpgrade libQt6OpenGL6Upgrade qt6-base-examplesUpgrade qt6-sql-mysqlUpgrade qt6-platformtheme-gtk3Upgrade libQt6Sql6Upgrade libQt6Network6Upgrade qt6-kmssupport-devel-staticUpgrade qt6-gui-develUpgrade libQt6OpenGLWidgets6Upgrade qt6-dbus-develUpgrade qt6-test-private-develUpgrade qt6-base-docs-qchUpgrade qt6-base-develUpgrade qt6-widgets-develUpgrade qt6-opengl-private-develUpgrade qt6-networkinformation-nmUpgrade qt6-gui-private-develUpgrade qt6-core-private-develUpgrade qt6-openglwidgets-develUpgrade qt6-platformsupport-devel-staticUpgrade qt6-platformsupport-private-develUpgrade qt6-dbus-private-develUpgrade qt6-widgets-private-devel | Nov 5, 2025 | Nov 5, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub