Vulnerability Description
An Uncontrolled Search Path Element vulnerability in the OpenSSL TLS backend of Qt Network (qtbase) in Qt Qt Framework (Unix) allows a local attacker to load a rogue CA certificate as a trusted system authority via a crafted certificate file placed in the application's working directory.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2025-14575?
CVE-2025-14575 is a documented vulnerability. An Uncontrolled Search Path Element vulnerability in the OpenSSL TLS backend of Qt Network (qtbase) in Qt Qt Framework (Unix) allows a local attacker to load a rogue CA certificate as a trusted system...
How severe is CVE-2025-14575?
CVSS scoring is not yet available for CVE-2025-14575. Check NVD for updates.
Is there a patch for CVE-2025-14575?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.