Skip to content
fr Sign in
9.2 Critical

CVE-2025-6338 There is an incomplete cleanup vulnerability in Qt Network's Schannel support on Windows which can lead to a Denial of…

Description

There is an incomplete cleanup vulnerability in Qt Network's Schannel support on Windows which can lead to a Denial of Service over a long period. This issue affects Qt from 5.15.0 through 6.8.3, from 6.9.0 before 6.9.2.

Affected products and versions

Product Affected versions Fixed in
Qt 6.9 6.9.0 → < 6.9.2 6.9.2
Qt 6.8 earliest → < 6.8.4 6.8.4
Qt 5.15 5.15.0 → 6.8.3 No fix stated
Qt 6.9 6.9.0 → < 6.9.2 6.9.2
Qt 6.8 earliest → < 6.8.4 6.8.4
Qt 5.15 5.15.0 → 6.8.3 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Qt

The 13 CVEs of Qt →
CVE-2025-14575 An Uncontrolled Search Path Element vulnerability in the OpenSSL TLS backend of Qt Network (qtbase) in Qt Qt Framework… 1.8 Low CVE-2026-6210 A type confusion vulnerability in Qt SVG allows an attacker to cause an application crash via a crafted SVG image 8.7 High CVE-2025-14576 Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading… 7.4 High CVE-2025-12385 Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability… 8.7 High
Track this CVE