Skip to content
OpenAdvisories
Medium ELSA-2025-22361 1 CVE

Moderate: qt6-qtquick3d security update (Oracle Linux 10)

Published Dec 2, 2025 · Updated Dec 2, 2025

Ecosystem: Oracle Linux

Summary

[6.9.1-1.1]
- Fix CVE-2025-11277 in bundled assimp library
Resolves: RHEL-120981

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 10 qt6-qtquick3d 0:6.9.1-1.el10_1.1
Oracle Linux · 10 qt6-qtquick3d-devel 0:6.9.1-1.el10_1.1
Oracle Linux · 10 qt6-qtquick3d-examples 0:6.9.1-1.el10_1.1

Vulnerabilities 1

  • Medium 5.3
    CVE-2025-11277

    Open Asset Import Library Assimp Q3DLoader.cpp InternReadFile heap-based overflow

    A weakness has been identified in Open Asset Import Library Assimp 6.0.2. This affects the function Q3DImporter::InternReadFile of the file assimp/code/AssetLib/Q3D/Q3DLoader.cpp. Executing a manipulation can lead to heap-based buffer overflow. The attack nee…

    Open Asset Import Library Assimp assimp assimp Debian Ubuntu Alpine PyPI