OESA-2025-1655

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1655
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2025-1655.json
JSON Data
https://api.test.osv.dev/v1/vulns/OESA-2025-1655
Upstream
Published
2025-06-20T13:26:36Z
Modified
2025-08-12T05:52:06.631110Z
Summary
qt6-qtbase security update
Details

Qt is a software toolkit for developing applications.

Security Fix(es):

An issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code.

If the function was called with malformed data, for example, an URL that contained a "charset" parameter that lacked a value (such as "data:charset,"), and Qt was built with assertions enabled, then it would hit an assertion, resulting in a denial of service (abort).

This impacts Qt up to 5.15.18, 6.0.0->6.5.8, 6.6.0->6.8.3 and 6.9.0. This has been fixed in 5.15.19, 6.5.9, 6.8.4 and 6.9.1.(CVE-2025-5455)

Database specific 
{
    "severity": "High"
}
References

Affected packages

openEuler:24.03-LTS / qt6-qtbase

Package

Name
qt6-qtbase
Purl
pkg:rpm/openEuler/qt6-qtbase&distro=openEuler-24.03-LTS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
6.5.2-11.oe2403

Ecosystem specific 

{
    "x86_64": [
        "qt6-qtbase-6.5.2-11.oe2403.x86_64.rpm",
        "qt6-qtbase-debuginfo-6.5.2-11.oe2403.x86_64.rpm",
        "qt6-qtbase-debugsource-6.5.2-11.oe2403.x86_64.rpm",
        "qt6-qtbase-devel-6.5.2-11.oe2403.x86_64.rpm",
        "qt6-qtbase-examples-6.5.2-11.oe2403.x86_64.rpm",
        "qt6-qtbase-gui-6.5.2-11.oe2403.x86_64.rpm",
        "qt6-qtbase-ibase-6.5.2-11.oe2403.x86_64.rpm",
        "qt6-qtbase-mysql-6.5.2-11.oe2403.x86_64.rpm",
        "qt6-qtbase-odbc-6.5.2-11.oe2403.x86_64.rpm",
        "qt6-qtbase-postgresql-6.5.2-11.oe2403.x86_64.rpm",
        "qt6-qtbase-private-devel-6.5.2-11.oe2403.x86_64.rpm",
        "qt6-qtbase-static-6.5.2-11.oe2403.x86_64.rpm"
    ],
    "src": [
        "qt6-qtbase-6.5.2-11.oe2403.src.rpm"
    ],
    "aarch64": [
        "qt6-qtbase-6.5.2-11.oe2403.aarch64.rpm",
        "qt6-qtbase-debuginfo-6.5.2-11.oe2403.aarch64.rpm",
        "qt6-qtbase-debugsource-6.5.2-11.oe2403.aarch64.rpm",
        "qt6-qtbase-devel-6.5.2-11.oe2403.aarch64.rpm",
        "qt6-qtbase-examples-6.5.2-11.oe2403.aarch64.rpm",
        "qt6-qtbase-gui-6.5.2-11.oe2403.aarch64.rpm",
        "qt6-qtbase-ibase-6.5.2-11.oe2403.aarch64.rpm",
        "qt6-qtbase-mysql-6.5.2-11.oe2403.aarch64.rpm",
        "qt6-qtbase-odbc-6.5.2-11.oe2403.aarch64.rpm",
        "qt6-qtbase-postgresql-6.5.2-11.oe2403.aarch64.rpm",
        "qt6-qtbase-private-devel-6.5.2-11.oe2403.aarch64.rpm",
        "qt6-qtbase-static-6.5.2-11.oe2403.aarch64.rpm"
    ],
    "noarch": [
        "qt6-qtbase-common-6.5.2-11.oe2403.noarch.rpm"
    ]
}