Subnavigation

Security advisory: A Heap-buffer-overflow issue in QTextMarkdownImporter impacts Qt

April 11, 2025 by Tuukka Kettunen | Comments

A Heap-buffer-overflow issue in QTextMarkdownImporter has been discovered and has been assigned the CVE id CVE-2025-3512.

Affected versions: From 6.8.0 up to 6.8.3. Versions before 6.6.0 are known to be unaffected.

Impact: Passing an incorrectly formatted markdown file to QTextMarkdownImporter can trigger a heap-buffer-overflow.

Solution: Apply the following patch or update to Qt 6.9.0 or 6.8.4

Patches:

Qt 6.8: https://codereview.qt-project.org/c/qt/qtbase/+/635699 or https://download.qt.io/official_releases/qt/6.8/CVE-2025-3512-qtbase-6.8.diff
Blog Topics:

Comments

Subscribe to our newsletter

Subscribe Newsletter

Try Qt 6.9 Now!

Download the latest release here: www.qt.io/download.

Qt 6.9 is now available, with new features and improvements for application developers and device creators.

We're Hiring

Check out all our open positions here and follow us on Instagram to see what it's like to be #QtPeople.

Read Next

Apr 9, 2025

Qt Group Authorized as a CVE Numbering Authority (CNA) by the CVE Program

Qt Group has been authorized by the Common Vulnerabilities and Exposures..

Read Article

Apr 7, 2025

Security advisory: A Denial-of-Service type of security issue in Qt XML module impacts Qt

A Denial-of-Service type of security issue in QDom classes of Qt XML..

Read Article

Apr 7, 2025

Navigation in Qt 6.9 documentation

In this blog post, I would like to talk about the improvements in..

Read Article