CVE-2025-3512
Severity CVSS v4.0:
MEDIUM
Type:
CWE-122
Heap-based Buffer Overflow
Publication date:
11/04/2025
Last modified:
15/04/2026
Description
There is a Heap-based Buffer Overflow vulnerability in QTextMarkdownImporter. This requires an incorrectly formatted markdown file to be passed to QTextMarkdownImporter to trigger the overflow.This issue affects Qt from 6.8.0 to 6.8.4. Versions up to 6.6.0 are known to be unaffected, and the fix is in 6.8.4 and later.
References to Advisories, Solutions, and Tools
- https://codereview.qt-project.org/c/qt/qtbase/+/635546
- http://www.openwall.com/lists/oss-security/2025/04/24/4
- http://www.openwall.com/lists/oss-security/2025/04/24/5
- http://www.openwall.com/lists/oss-security/2025/04/24/6
- http://www.openwall.com/lists/oss-security/2025/04/25/1
- http://www.openwall.com/lists/oss-security/2025/04/25/2