CVE-2025-3512CWE-122

Buffer overflow in QTextMarkdownImporter

Medium · published April 11, 2025

CVSS v4.0
4.8
EPSS
0%
Percentile
12.7
In the wild
Unconfirmed
What it is

There is a Heap-based Buffer Overflow vulnerability in QTextMarkdownImporter. This requires an incorrectly formatted markdown file to be passed to QTextMarkdownImporter to trigger the overflow.

This issue affects Qt from 6.8.0 to 6.8.4. Versions up to 6.6.0 are known to be unaffected, and the fix is in 6.8.4 and later.

The record
Technical detail
CVSS v4.0
4.8 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/U:Clear
EPSS
0.00227 · 12.7th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2025-04-11T07:39Z
EPSS history
Timeline
  • 11 APR 07:39Z
    Buffer overflow in QTextMarkdownImporter
    cvelistv5