CVE-2025-3512 - CVE House
Back to Database
Status published Medium CVE-2025-3512

Buffer overflow in QTextMarkdownImporter

Vulnerability Description

There is a Heap-based Buffer Overflow vulnerability in QTextMarkdownImporter. This requires an incorrectly formatted markdown file to be passed to QTextMarkdownImporter to trigger the overflow.This issue affects Qt from 6.8.0 to 6.8.4. Versions up to 6.6.0 are known to be unaffected, and the fix is in 6.8.4 and later.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-3512

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • oss-fuzz

References

More from The Qt Company

View All →
CVE-2025-6338
Possible denial of service with multiple incoming connections to a Schannel based server with a TLS backend
Critical 9.2
CVE-2025-5992
Passing values outside of expected range to QColorTransferGenericFunction can cause a denial of service
Low 2.3
CVE-2025-5991
Use after free in QHttp2ProtocolHandler
Low 2.1
CVE-2025-5683
When loading a specifically crafted ICNS format image file in...
Medium 5.1
CVE-2025-5455
Possible denial of service when passing malformed data in a URL to qDecodeDataUrl
High 8.4

Affected Vendor

The Qt Company

View all reports →

Affected Software

Qt
Vulnerable Versions:
0, 6.6.0, 6.8.0, 6.8.4

Timeline

Official Publish: April 11th, 2025
Last Modified: April 25th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-122

MITRE ATT&CK TTPs

T1203 Exploitation for Client Execution
Execution
T1068 Exploitation for Privilege Escalation
Privilege Escalation
T1055 Process Injection
Defense Evasion