Summary
It was discovered that the vendored LibTIFF in QT WebEngine incorrectly
handled memory when parsing malformed TIFF image metadata. An attacker
could possibly use this issue to cause a denial of service, obtain
sensitive information, or execute arbitrary code.
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | qtwebengine-opensource-src | 5.9.5+dfsg-0ubuntu2+esm1 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | qtwebengine-opensource-src | 5.12.8+dfsg-0ubuntu1.1+esm1 |
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | qtwebengine-opensource-src | 5.15.9+dfsg-1ubuntu0.1~esm1 |
| Ubuntu · Pro 24.04 LTS Pro:24.04:LTS | qtwebengine-opensource-src | 5.15.16+dfsg-3ubuntu0.1~esm1 |
| Ubuntu · Pro 26.04 LTS Pro:26.04:LTS | qtwebengine-opensource-src | 5.15.19+dfsg2-4ubuntu0.1~esm1 |
References
-
report
https://ubuntu.com/security/CVE-2025-9900