Summary
Qt5 - QtDeclarative component.
Security Fix(es):
* qt5-qtdeclarative: qt6-qtdeclarative: Improper validation of <img> tag size in Text component parser (CVE-2025-12385)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | qt5-qtdeclarative | 5.15.3-3.el8_10 |
| AlmaLinux · 8 | qt5-qtdeclarative-devel | 5.15.3-3.el8_10 |
| AlmaLinux · 8 | qt5-qtdeclarative-examples | 5.15.3-3.el8_10 |
| AlmaLinux · 8 | qt5-qtdeclarative-static | 5.15.3-3.el8_10 |
Vulnerabilities 1
-
High 8.7
Improper validation of <img> tag size in Text component parser
Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation. This issue affects users …