Skip to content
OpenAdvisories
Medium RHSA-2025:20963 1 CVE

Red Hat Security Advisory: qt5-qt3d security update

Published Nov 12, 2025 · Updated Jul 12, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream qt5-qt3d 0:5.15.9-2.el9_7.1
Red Hat · RHEL 9 enterprise_linux:9::appstream qt5-qt3d-debuginfo 0:5.15.9-2.el9_7.1
Red Hat · RHEL 9 enterprise_linux:9::appstream qt5-qt3d-debugsource 0:5.15.9-2.el9_7.1
Red Hat · RHEL 9 enterprise_linux:9::appstream qt5-qt3d-devel 0:5.15.9-2.el9_7.1
Red Hat · RHEL 9 enterprise_linux:9::appstream qt5-qt3d-devel-debuginfo 0:5.15.9-2.el9_7.1
Red Hat · RHEL 9 enterprise_linux:9::appstream qt5-qt3d-examples 0:5.15.9-2.el9_7.1
Red Hat · RHEL 9 enterprise_linux:9::appstream qt5-qt3d-examples-debuginfo 0:5.15.9-2.el9_7.1
Red Hat · RHEL 9 enterprise_linux:9::appstream qt5-qt3d-tests-debuginfo 0:5.15.9-2.el9_7.1

Vulnerabilities 1

  • Medium 5.3
    CVE-2025-11277

    Open Asset Import Library Assimp Q3DLoader.cpp InternReadFile heap-based overflow

    A weakness has been identified in Open Asset Import Library Assimp 6.0.2. This affects the function Q3DImporter::InternReadFile of the file assimp/code/AssetLib/Q3D/Q3DLoader.cpp. Executing a manipulation can lead to heap-based buffer overflow. The attack nee…

    Open Asset Import Library Assimp assimp assimp Debian Ubuntu Alpine PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2401622
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_20963.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-11277
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-11277
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-11277
  • article
    https://github.com/assimp/assimp/issues/6358
  • article
    https://vuldb.com/?id.327011
  • article
    https://vuldb.com/?submit.658912