CVE-2025-3512: Buffer overflow in QTextMarkdownImporter
First published: Fri Apr 11 2025(Updated: )
There is a Heap-based Buffer Overflow vulnerability in QTextMarkdownImporter. This requires an incorrectly formatted markdown file to be passed to QTextMarkdownImporter to trigger the overflow.This issue affects Qt from 6.8.0 to 6.8.4. Versions up to 6.6.0 are known to be unaffected, and the fix is in 6.8.4 and later.
Credit: a59d8014-47c4-4630-ab43-e1b13cbe58e3
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Qt Base | >=6.8.0<6.8.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://codereview.qt-project.org/c/qt/qtbase/+/635546
- http://www.openwall.com/lists/oss-security/2025/04/24/4
- http://www.openwall.com/lists/oss-security/2025/04/24/5
- http://www.openwall.com/lists/oss-security/2025/04/24/6
- http://www.openwall.com/lists/oss-security/2025/04/25/1
- http://www.openwall.com/lists/oss-security/2025/04/25/2
Frequently Asked Questions
What is the severity of CVE-2025-3512?
CVE-2025-3512 has been rated as a critical severity vulnerability due to the potential for remote code execution.
How do I fix CVE-2025-3512?
To fix CVE-2025-3512, upgrade Qt to version 6.8.5 or later where the vulnerability has been patched.
What software versions are affected by CVE-2025-3512?
CVE-2025-3512 affects Qt versions 6.8.0 to 6.8.4.
What kind of exploitation can occur through CVE-2025-3512?
CVE-2025-3512 can be exploited by passing an incorrectly formatted markdown file to QTextMarkdownImporter, leading to a heap-based buffer overflow.
Are there any known unaffected versions for CVE-2025-3512?
Yes, Qt versions prior to 6.8.0 and 6.6.0 are known to be unaffected by CVE-2025-3512.
- agent/weakness
- agent/description
- agent/type
- agent/title
- agent/first-publish-date
- agent/author
- agent/severity
- collector/oss-sec
- source/oss-sec
- alias/CVE-2025-3512
- agent/source
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/last-modified-date
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/event
- agent/tags
- collector/nvd-api
- source/NVD
- vendor/qt
- canonical/qt base