CVE-2024-25580

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-25580
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-25580.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-25580
Downstream
AZL (2)
CLSA (1)
DEBIAN (1)
MGASA (1)
OESA (2)
openSUSE (2)
RHSA (2)
RLSA (1)
UBUNTU (1)
Related
ALSA (2)
openSUSE (2)
Published
2024-03-27T00:00:00Z
Modified
2026-10-24T10:52:28Z
Severity
  • 6.2 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

An issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.12, 6.3.x through 6.5.x before 6.5.5, and 6.6.x before 6.6.2. A buffer overflow and application crash can occur via a crafted KTX image file.

Database specific 
{
    "cna_assigner": "mitre",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/25xxx/CVE-2024-25580.json"
}
References

Affected packages

Git / github.com/qt/qt5

Affected ranges

Type
GIT
Repo
https://github.com/qt/qt5
Events
Introduced
061cf1f2ca98b961746784382e354208f3fc97f1
Fixed
c59ae95d8aed879768fe09e0de04f693724e6319
Introduced
78410d7e8b7aafdcbb4feea3a943038c7e0a0b5f
Fixed
2fcea36b29af058caa03561f364fea488e6a183c
Introduced
1734139bf4629af593e79d247a18f8e511bf7c5e
Fixed
bf6bfe75efb472373d79aaaf182830ff43a0b6fb
Introduced
244fc454356bc9fb31a30692b8645cbfd91dc52c
Fixed
15b7e7434fd79334a5cf071e36cee7663fe1fb45
Database specific
Show details 
{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "5.12.0"
                },
                {
                    "fixed": "5.15.17"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "6.0.0"
                },
                {
                    "fixed": "6.2.12"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "6.3.0"
                },
                {
                    "fixed": "6.5.5"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "6.6.0"
                },
                {
                    "fixed": "6.6.2"
                }
            ],
            "source": "CPE_RANGE"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-25580.json"

Git / github.com/qt/qtbase

Affected ranges

Type
GIT
Repo
https://github.com/qt/qtbase
Events
Introduced
13ed06640c6cf32ea8c784c896c6bf017053edb3
Fixed
8e79bee4afa2a1466f360f44fb07d24e432a82a6
Introduced
fc9cda5f08ac848e88f63dd4a07c08b2fbc6bf17
Fixed
3a82051eade32b34c2f4f6f652a9d8ef0db96c71
Introduced
9554d315aa74eaba1726405ee09117e2ebc6111f
Fixed
c8c0c677693c047a9dbf94c2a88eb920ed11acc8
Introduced
33f5e985e480283bb0ca9dea5f82643e825ba87c
Fixed
dec1863c7dc63e5788b0c6c061d36e856a6ae2b2
Database specific
Show details 
{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "5.12.0"
                },
                {
                    "fixed": "5.15.17"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "6.0.0"
                },
                {
                    "fixed": "6.2.12"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "6.3.0"
                },
                {
                    "fixed": "6.5.5"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "6.6.0"
                },
                {
                    "fixed": "6.6.2"
                }
            ],
            "source": "CPE_RANGE"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-25580.json"