Back to Database
Status published
Low
CVE-2025-14575
Uncontrolled Search Path Element in Qt Network OpenSSL TLS backend allows rogue CA certificate loading
Vulnerability Description
An Uncontrolled Search Path Element vulnerability in the OpenSSL TLS backend of Qt Network (qtbase) in Qt Qt Framework (Unix) allows a local attacker to load a rogue CA certificate as a trusted system authority via a crafted certificate file placed in the application's working directory.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-14575
Credits & Attribution
No credits recorded in the NVD database.
More from The Qt Company
View All →CVE-2025-6338
Possible denial of service with multiple incoming connections to a Schannel based server with a TLS backend
Critical
9.2
CVE-2025-5992
Passing values outside of expected range to QColorTransferGenericFunction can cause a denial of service
Low
2.3
CVE-2025-5991
Use after free in QHttp2ProtocolHandler
Low
2.1
CVE-2025-5683
When loading a specifically crafted ICNS format image file in...
Medium
5.1
CVE-2025-5455
Possible denial of service when passing malformed data in a URL to qDecodeDataUrl
High
8.4
Affected Vendor
The Qt Company
View all reports →Affected Software
Qt
Vulnerable Versions:
5.0.0, 6.0.0, 6.6.0, 6.9.0
Timeline
Official Publish:
May 19th, 2026
Last Modified:
May 19th, 2026
Added to House:
July 22nd, 2026