CVE-2025-5683: Qt

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash.  This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.

Affected products

• Qt Qt: from 6.3.0, before 6.5.10 (fixed in 6.5.10); from 6.6.0, before 6.8.5 (fixed in 6.8.5); from 6.9.0, before 6.9.1 (fixed in 6.9.1)

Published 2025-06-05. Last modified 2026-07-29.