Skip to content
OpenAdvisories
Medium ELSA-2025-20963 1 CVE

Moderate: qt5-qt3d security update (Oracle Linux 9)

Published Nov 25, 2025 · Updated Nov 25, 2025

Ecosystem: Oracle Linux

Summary

[5.15.9-2.1]
- Assimp: Fix heap-based overflow in Q3DLoader::InternReadFile
Resolves: RHEL-120986

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 9 qt5-qt3d 0:5.15.9-2.el9_7.1
Oracle Linux · 9 qt5-qt3d-devel 0:5.15.9-2.el9_7.1
Oracle Linux · 9 qt5-qt3d-examples 0:5.15.9-2.el9_7.1

Vulnerabilities 1

  • Medium 5.3
    CVE-2025-11277

    Open Asset Import Library Assimp Q3DLoader.cpp InternReadFile heap-based overflow

    A weakness has been identified in Open Asset Import Library Assimp 6.0.2. This affects the function Q3DImporter::InternReadFile of the file assimp/code/AssetLib/Q3D/Q3DLoader.cpp. Executing a manipulation can lead to heap-based buffer overflow. The attack nee…

    Open Asset Import Library Assimp assimp assimp Debian Ubuntu Alpine PyPI