CVE-2025-12385 — Improper validation of tag size in Text component parser

Affected: Qt

Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation.

This issue affects users of the Text component in Qt Quick. Missing validation of the width and height in the <img> tag could cause an application to become unresponsive.

This issue affects Qt: from 5.0.0 through 6.5.10, from 6.6.0 through 6.8.5, from 6.9.0 through 6.10.0.

USN-8357-1 — qtdeclarative-opensource-src vulnerability

Affected: Ubuntu:Pro:20.04:LTS: qtdeclarative-opensource-src, Ubuntu:Pro:22.04:LTS: qtdeclarative-opensource-src, Ubuntu:Pro:24.04:LTS: qtdeclarative-opensource-src

It was discovered that Qt Declarative did not properly validate the width and height attributes of image tags in the Text component of Qt Quick. An attacker could possibly use this issue to cause Qt Declarative to use excessive resources, leading to a denial of service.

Most recent entries from all

CVE-2025-12385 — Improper validation of tag size in Text component parser

USN-8357-1 — qtdeclarative-opensource-src vulnerability