CVE-2025-3512: Buffer overflow in QTextMarkdownImporter
There is a Heap-based Buffer Overflow vulnerability in QTextMarkdownImporter. This requires an incorrectly formatted markdown file to be passed to QTextMarkdownImporter to trigger the overflow.
This issue affects Qt from 6.8.0 to 6.8.4. Versions up to 6.6.0 are known to be unaffected, and the fix is in 6.8.4 and later.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Qt Base QTextMarkdownImporterto a version that resolves this vulnerability.Fixed in 6.8.4
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3512?
CVE-2025-3512 has been rated as a critical severity vulnerability due to the potential for remote code execution.
How do I fix CVE-2025-3512?
To fix CVE-2025-3512, upgrade Qt to version 6.8.5 or later where the vulnerability has been patched.
What software versions are affected by CVE-2025-3512?
CVE-2025-3512 affects Qt versions 6.8.0 to 6.8.4.
What kind of exploitation can occur through CVE-2025-3512?
CVE-2025-3512 can be exploited by passing an incorrectly formatted markdown file to QTextMarkdownImporter, leading to a heap-based buffer overflow.
Are there any known unaffected versions for CVE-2025-3512?
Yes, Qt versions prior to 6.8.0 and 6.6.0 are known to be unaffected by CVE-2025-3512.