QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read (or division by zero). This is fixed in 5.15.19, 6.5.9, and 6.8.2.
CVSS Details
- CVSS 3.1 Base Score: 3.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | no-fix-debian-deb-package | May 15, 2025 | May 15, 2025 | |
| Redhat_linux | no-fix-redhat-rpm-package | Jul 17, 2026 | Oct 31, 2025 | |
| Suse | — | suse-upgrade-libqt6bluetooth6suse-upgrade-libqt6nfc6suse-upgrade-qt6-connectivitysuse-upgrade-qt6-connectivity-develsuse-upgrade-qt6-connectivity-docs-htmlsuse-upgrade-qt6-connectivity-docs-qchsuse-upgrade-qt6-connectivity-examplessuse-upgrade-qt6-connectivity-private-devel | Jan 27, 2025 | Jan 25, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub