CVE-2025-5683: Vulnerability in Qt
When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.
AI Analysis
Technical Summary
This vulnerability in Qt arises from improper handling of ICNS format image files in the QImage component, leading to a crash when processing a maliciously crafted file. The affected versions include 6.3.0 through 6.5.9, 6.6.0 through 6.8.4, and 6.9.0. The crash is triggered without requiring privileges or user interaction beyond opening the file. The issue is addressed by fixes in Qt 6.5.10, 6.8.5, and 6.9.1.
Potential Impact
An attacker can cause a denial of service by triggering a crash in applications using vulnerable Qt versions when loading a crafted ICNS image file. There is no indication of code execution or data corruption beyond the crash. The vulnerability requires user interaction to open the malicious file and does not require privileges.
Mitigation Recommendations
Upgrade affected Qt versions to 6.5.10, 6.8.5, or 6.9.1 where the vulnerability is fixed. No other mitigation or workaround is indicated in the provided data.
CVE-2025-5683: Vulnerability in Qt
Description
When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.
CVSS v4.0
Score 5.1medium
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability in Qt arises from improper handling of ICNS format image files in the QImage component, leading to a crash when processing a maliciously crafted file. The affected versions include 6.3.0 through 6.5.9, 6.6.0 through 6.8.4, and 6.9.0. The crash is triggered without requiring privileges or user interaction beyond opening the file. The issue is addressed by fixes in Qt 6.5.10, 6.8.5, and 6.9.1.
Potential Impact
An attacker can cause a denial of service by triggering a crash in applications using vulnerable Qt versions when loading a crafted ICNS image file. There is no indication of code execution or data corruption beyond the crash. The vulnerability requires user interaction to open the malicious file and does not require privileges.
Mitigation Recommendations
Upgrade affected Qt versions to 6.5.10, 6.8.5, or 6.9.1 where the vulnerability is fixed. No other mitigation or workaround is indicated in the provided data.
Technical Details
- Data Version
- 5.1
- Assigner Short Name
- TQtC
- Date Reserved
- 2025-06-04T13:23:27.988Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 68418437182aa0cae2dcccb9
Added to database: 06/05/2025, 11:49:11 UTC
Last enriched: 07/29/2026, 21:37:01 UTC
Last updated: 09/10/2026, 19:36:51 UTC
Views: 139
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.