CVE-2025-5992: Passing values outside of expected range to QColorTransferGenericFunction can cause a denial of service
When passing values outside of the expected range to QColorTransferGenericFunction it can cause a denial of service, for example, this can happen when passing a specifically crafted ICC profile to QColorSpace::fromICCProfile.This issue affects Qt from 6.6.0 through 6.8.3, from 6.9.0 through 6.9.1. This is fixed in 6.8.4 and 6.9.2.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5992?
CVE-2025-5992 has been classified as a denial of service vulnerability.
How do I fix CVE-2025-5992?
To fix CVE-2025-5992, update Qt to a version beyond 6.8.3 or 6.9.0.
Which versions of Qt are affected by CVE-2025-5992?
CVE-2025-5992 affects Qt versions from 6.6.0 to 6.8.3 and also 6.9.0.
What causes CVE-2025-5992?
CVE-2025-5992 is caused by passing values outside of the expected range to QColorTransferGenericFunction.
Can CVE-2025-5992 be exploited remotely?
CVE-2025-5992 can result in denial of service when a specially crafted ICC profile is passed to the affected function.