CVE-2025-12385: Qt

High severity, CVSS 8.7. EPSS: 0.3% chance of exploitation in the next 30 days.

Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation. This issue affects users of the Text component in Qt Quick. Missing validation of the width and height in the <img> tag could cause an application to become unresponsive. This issue affects Qt: from 5.0.0 through 6.5.10, from 6.6.0 through 6.8.5, from 6.9.0 through 6.10.0.

Affected products

• Qt Qt: from 5.0.0, up to and including 6.5.10; from 6.6.0, up to and including 6.8.5; from 6.9.0, up to and including 6.10.0

Published 2025-12-03. Last modified 2026-07-29.