debian/qtimageformats-opensource-src vulnerabilities

Latest debian/qtimageformats-opensource-src CVEs

Newest publication first

1. CVE-2025-5683 When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fix...

   Published 2025-06-05

   Medium·CVSS 5.1 EPSS 0.25%

   When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.

2. CVE-2020-23884 A buffer overflow in Nomacs v3.15.0 allows attackers to cause a denial of service (DoS) via a crafted MNG file.

   Published 2021-11-10

   Medium·CVSS 5.5 EPSS 0.98%

   A buffer overflow in Nomacs v3.15.0 allows attackers to cause a denial of service (DoS) via a crafted MNG file.

3. CVE-2018-19871 An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.

   Published 2018-12-26

   Medium·CVSS 6.5 EPSS 1.6%

   An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.