Description
QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read (or division by zero). This is fixed in 5.15.19, 6.5.9, and 6.8.2.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Qt | Qt | < 5.15.19, 6.0.0 – < 6.5.9, 6.6.0 – < 6.8.2 | 5.15.19 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | qt6-connectivity | 6.7.2-8 | — |
| Debian 13 | qt6-connectivity | 6.7.2-8 | — |
| Debian 13 | qtconnectivity-opensource-src | 5.15.15-3 | — |
| Debian 12 | qt6-connectivity +1 | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 25.10 | qtconnectivity-opensource-src | No fix yet | — |
| Ubuntu 24.04 LTS | qt6-connectivity +1 | No fix yet | — |
| Ubuntu 22.04 LTS | qt6-connectivity +1 | No fix yet | — |
| Ubuntu 20.04 LTS | qtconnectivity-opensource-src | No fix yet | — |
| Ubuntu 18.04 LTS | qtconnectivity-opensource-src | No fix yet | — |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | qtconnectivity-opensource-src | No fix yet | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE Package Hub 15 SP6 | qt6-connectivity +1 | 6.6.3-bp156.2.3.1 | openSUSE-SU-2025:0033-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | libqt5-qtconnectivity | 5.15.16+kde2-1.1 | openSUSE-SU-2025:14716-1 |
| openSUSE Tumbleweed | qt6-connectivity | 6.8.1-2.1 | openSUSE-SU-2025:14692-1 |
| openSUSE Leap 15.6 | qt6-connectivity +1 | 6.6.3-bp156.2.3.1 | openSUSE-SU-2025:0033-1 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 2 (CBL-Mariner) | qt5-qtconnectivity | No fix yet | — |
Advisories 4
- openSUSE-SU-2025:0033-1 Security update for qt6-connectivity SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14692-1 libQt6Bluetooth6-6.8.1-2.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2025-0150 QT: Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen BSI CERT-Bund (WID) · Oct 30, 2025
- openSUSE-SU-2025:14716-1 libQt5Bluetooth5-32bit-5.15.16+kde2-1.1 on GA media SUSE / openSUSE Security Updates · May 7, 2025