Skip to content
OpenAdvisories
Medium RLSA-2025:20963 1 CVE

Moderate: qt5-qt3d security update

Published Nov 21, 2025 · Updated Nov 21, 2025

Ecosystem: Rocky Linux

Summary

Qt 3D provides functionality for near-realtime simulation systems with support for 2D and 3D rendering in both Qt C++ and Qt Quick applications).

Security Fix(es):

* assimp: Open Asset Import Library Assimp Q3DLoader.cpp InternReadFile heap-based overflow (CVE-2025-11277)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 9 qt5-qt3d 0:5.15.9-2.el9_7.1

Vulnerabilities 1

  • Medium 5.3
    CVE-2025-11277

    Open Asset Import Library Assimp Q3DLoader.cpp InternReadFile heap-based overflow

    A weakness has been identified in Open Asset Import Library Assimp 6.0.2. This affects the function Q3DImporter::InternReadFile of the file assimp/code/AssetLib/Q3D/Q3DLoader.cpp. Executing a manipulation can lead to heap-based buffer overflow. The attack nee…

    Open Asset Import Library Assimp assimp assimp Debian Ubuntu Alpine PyPI

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2401622