CVE-2025-6338CWE-459

CVE-2025-6338

published October 16, 2025

CVSS
9.2
EPSS
0%
Percentile
35.9
In the wild
Unconfirmed
What it is

There is an incomplete cleanup vulnerability in Qt Network's Schannel support on Windows which can lead to a Denial of Service over a long period.

This issue affects Qt from 5.15.0 through 6.8.3, from 6.9.0 before 6.9.2.

The record
Technical detail
CVSS
9.2 · NONE
CVSS v4.0
Not supplied
EPSS
0.00427 · 35.9th percentile
Weakness
CWE-459 · Incomplete Cleanup
Published
2025-10-16T14:15Z
References (1)
https://codereview.qt-project.org/c/qt/qtbase/+/651495 · a59d8014-47c4-4630-ab43-e1b13cbe58e3
EPSS history
Timeline
  • 16 OCT 09:22Z
    Possible denial of service with multiple incoming connections to a Schannel based server with a TLS backend
    cvelistv5