Vulnerability Description
QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read (or division by zero). This is fixed in 5.15.19, 6.5.9, and 6.8.2.
CVSS Score
3.1
LOW
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Related Weaknesses (CWE)
References
- https://codereview.qt-project.org/q/QLowEnergyController
- https://www.qt.io/blog/security-advisory-qlowenergycontroller-on-linux
FAQ
What is CVE-2025-23050?
CVE-2025-23050 is a vulnerability with a CVSS score of 3.1 (LOW). QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read (or division by zero). This is fixed in 5.15.19, 6.5.9, and 6.8.2.
How severe is CVE-2025-23050?
CVE-2025-23050 has been rated LOW with a CVSS base score of 3.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-23050?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.