CVE catalog
CVE-2022-25255
Qt vulnerabilities
- Severity
- High · CVSS 7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.33% · Oct 25, 2026
In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a binary from the current working directory when not found in the PATH.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | qt6-base | sid | 6.11.2+dfsg-7 | fixed |
| Debian | qt6-base | forky | 6.11.2+dfsg-5 | fixed |
| Debian | qt6-base | trixie | 6.8.2+dfsg-9+deb13u2 | fixed |
| Debian | qt6-base | bookworm | 6.4.2+dfsg-10 | fixed |
| Debian | qtbase-opensource-src | sid | 5.15.19+dfsg-6 | fixed |
| Debian | qtbase-opensource-src | forky | 5.15.19+dfsg-5 | fixed |
| Debian | qtbase-opensource-src | trixie | 5.15.15+dfsg-6+deb13u1 | fixed |
| Debian | qtbase-opensource-src | bookworm | 5.15.8+dfsg-11+deb12u3 | fixed |
| Debian | qtbase-opensource-src-gles | sid | 5.15.19+dfsg-2 | fixed |
| Debian | qtbase-opensource-src-gles | forky | 5.15.19+dfsg-2 | fixed |
| Debian | qtbase-opensource-src-gles | trixie | 5.15.15+dfsg-2 | fixed |
| Debian | qtbase-opensource-src-gles | bookworm | 5.15.8+dfsg-3 | fixed |
| Ubuntu | qtbase-opensource-src | noble | 5.15.13+dfsg-1ubuntu1+esm1 | fixed |
| Ubuntu | libqt5concurrent5t64 | noble | 5.15.13+dfsg-1ubuntu1+esm1 | fixed |
| Ubuntu | libqt5core5t64 | noble | 5.15.13+dfsg-1ubuntu1+esm1 | fixed |
| Ubuntu | libqt5dbus5t64 | noble | 5.15.13+dfsg-1ubuntu1+esm1 | fixed |
| Ubuntu | libqt5gui5t64 | noble | 5.15.13+dfsg-1ubuntu1+esm1 | fixed |
| Ubuntu | libqt5network5t64 | noble | 5.15.13+dfsg-1ubuntu1+esm1 | fixed |
| Ubuntu | libqt5opengl5-dev | noble | 5.15.13+dfsg-1ubuntu1+esm1 | fixed |
| Ubuntu | libqt5opengl5t64 | noble | 5.15.13+dfsg-1ubuntu1+esm1 | fixed |
| Ubuntu | libqt5printsupport5t64 | noble | 5.15.13+dfsg-1ubuntu1+esm1 | fixed |
| Ubuntu | libqt5sql5-ibase | noble | 5.15.13+dfsg-1ubuntu1+esm1 | fixed |
| Ubuntu | libqt5sql5-mysql | noble | 5.15.13+dfsg-1ubuntu1+esm1 | fixed |
| Ubuntu | libqt5sql5-odbc | noble | 5.15.13+dfsg-1ubuntu1+esm1 | fixed |
| Ubuntu | libqt5sql5-psql | noble | 5.15.13+dfsg-1ubuntu1+esm1 | fixed |
| Ubuntu | libqt5sql5-sqlite | noble | 5.15.13+dfsg-1ubuntu1+esm1 | fixed |
| Ubuntu | libqt5sql5-tds | noble | 5.15.13+dfsg-1ubuntu1+esm1 | fixed |
| Ubuntu | libqt5sql5t64 | noble | 5.15.13+dfsg-1ubuntu1+esm1 | fixed |
| Ubuntu | libqt5test5t64 | noble | 5.15.13+dfsg-1ubuntu1+esm1 | fixed |
| Ubuntu | libqt5widgets5t64 | noble | 5.15.13+dfsg-1ubuntu1+esm1 | fixed |
| Ubuntu | libqt5xml5t64 | noble | 5.15.13+dfsg-1ubuntu1+esm1 | fixed |
| Ubuntu | qt5-gtk-platformtheme | noble | 5.15.13+dfsg-1ubuntu1+esm1 | fixed |
| Ubuntu | qt5-qmake | noble | 5.15.13+dfsg-1ubuntu1+esm1 | fixed |
| Ubuntu | qt5-qmake-bin | noble | 5.15.13+dfsg-1ubuntu1+esm1 | fixed |
| Ubuntu | qt5-xdgdesktopportal-platformtheme | noble | 5.15.13+dfsg-1ubuntu1+esm1 | fixed |
| Ubuntu | qtbase5-dev | noble | 5.15.13+dfsg-1ubuntu1+esm1 | fixed |
| Ubuntu | qtbase5-dev-tools | noble | 5.15.13+dfsg-1ubuntu1+esm1 | fixed |
| Ubuntu | qtbase5-doc | noble | 5.15.13+dfsg-1ubuntu1+esm1 | fixed |
| Ubuntu | qtbase5-doc-dev | noble | 5.15.13+dfsg-1ubuntu1+esm1 | fixed |
| Ubuntu | qtbase5-doc-html | noble | 5.15.13+dfsg-1ubuntu1+esm1 | fixed |
| Ubuntu | qtbase5-examples | noble | 5.15.13+dfsg-1ubuntu1+esm1 | fixed |
| Ubuntu | qtbase5-private-dev | noble | 5.15.13+dfsg-1ubuntu1+esm1 | fixed |
| Opensuse | libqt5-qtbase | tumbleweed | 5.15.2+kde294-4.1 | fixed |
| Opensuse | qutebrowser | tumbleweed | 2.5.0-1.1 | fixed |
| Opensuse | qt6-base | tumbleweed | 6.2.3-2.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | qt6-base | source | sid | 6.2.4+dfsg-4 | not yet assigned | Not reported | Not reported |
| Debian | qt6-base | source | forky | 6.2.4+dfsg-4 | not yet assigned | Not reported | Not reported |
| Debian | qt6-base | source | trixie | 6.2.4+dfsg-4 | not yet assigned | Not reported | Not reported |
| Debian | qt6-base | source | bookworm | 6.2.4+dfsg-4 | not yet assigned | Not reported | Not reported |
| Debian | qtbase-opensource-src | source | sid | 5.15.2+dfsg-15 | not yet assigned | Not reported | Not reported |
| Debian | qtbase-opensource-src | source | forky | 5.15.2+dfsg-15 | not yet assigned | Not reported | Not reported |
| Debian | qtbase-opensource-src | source | trixie | 5.15.2+dfsg-15 | not yet assigned | Not reported | Not reported |
| Debian | qtbase-opensource-src | source | bookworm | 5.15.2+dfsg-15 | not yet assigned | Not reported | Not reported |
| Debian | qtbase-opensource-src-gles | source | sid | 5.15.4+dfsg-2 | not yet assigned | Not reported | Not reported |
| Debian | qtbase-opensource-src-gles | source | forky | 5.15.4+dfsg-2 | not yet assigned | Not reported | Not reported |
| Debian | qtbase-opensource-src-gles | source | trixie | 5.15.4+dfsg-2 | not yet assigned | Not reported | Not reported |
| Debian | qtbase-opensource-src-gles | source | bookworm | 5.15.4+dfsg-2 | not yet assigned | Not reported | Not reported |
| Ubuntu | qtbase-opensource-src | deb | noble | 5.15.13+dfsg-1ubuntu1+esm1 | Not reported | Not reported | Not reported |
| Ubuntu | libqt5concurrent5t64 | deb | noble | 5.15.13+dfsg-1ubuntu1+esm1 | Not reported | Not reported | Not reported |
| Ubuntu | libqt5core5t64 | deb | noble | 5.15.13+dfsg-1ubuntu1+esm1 | Not reported | Not reported | Not reported |
| Ubuntu | libqt5dbus5t64 | deb | noble | 5.15.13+dfsg-1ubuntu1+esm1 | Not reported | Not reported | Not reported |
| Ubuntu | libqt5gui5t64 | deb | noble | 5.15.13+dfsg-1ubuntu1+esm1 | Not reported | Not reported | Not reported |
| Ubuntu | libqt5network5t64 | deb | noble | 5.15.13+dfsg-1ubuntu1+esm1 | Not reported | Not reported | Not reported |
| Ubuntu | libqt5opengl5-dev | deb | noble | 5.15.13+dfsg-1ubuntu1+esm1 | Not reported | Not reported | Not reported |
| Ubuntu | libqt5opengl5t64 | deb | noble | 5.15.13+dfsg-1ubuntu1+esm1 | Not reported | Not reported | Not reported |
| Ubuntu | libqt5printsupport5t64 | deb | noble | 5.15.13+dfsg-1ubuntu1+esm1 | Not reported | Not reported | Not reported |
| Ubuntu | libqt5sql5-ibase | deb | noble | 5.15.13+dfsg-1ubuntu1+esm1 | Not reported | Not reported | Not reported |
| Ubuntu | libqt5sql5-mysql | deb | noble | 5.15.13+dfsg-1ubuntu1+esm1 | Not reported | Not reported | Not reported |
| Ubuntu | libqt5sql5-odbc | deb | noble | 5.15.13+dfsg-1ubuntu1+esm1 | Not reported | Not reported | Not reported |
| Ubuntu | libqt5sql5-psql | deb | noble | 5.15.13+dfsg-1ubuntu1+esm1 | Not reported | Not reported | Not reported |
| Ubuntu | libqt5sql5-sqlite | deb | noble | 5.15.13+dfsg-1ubuntu1+esm1 | Not reported | Not reported | Not reported |
| Ubuntu | libqt5sql5-tds | deb | noble | 5.15.13+dfsg-1ubuntu1+esm1 | Not reported | Not reported | Not reported |
| Ubuntu | libqt5sql5t64 | deb | noble | 5.15.13+dfsg-1ubuntu1+esm1 | Not reported | Not reported | Not reported |
| Ubuntu | libqt5test5t64 | deb | noble | 5.15.13+dfsg-1ubuntu1+esm1 | Not reported | Not reported | Not reported |
| Ubuntu | libqt5widgets5t64 | deb | noble | 5.15.13+dfsg-1ubuntu1+esm1 | Not reported | Not reported | Not reported |
| Ubuntu | libqt5xml5t64 | deb | noble | 5.15.13+dfsg-1ubuntu1+esm1 | Not reported | Not reported | Not reported |
| Ubuntu | qt5-gtk-platformtheme | deb | noble | 5.15.13+dfsg-1ubuntu1+esm1 | Not reported | Not reported | Not reported |
| Ubuntu | qt5-qmake | deb | noble | 5.15.13+dfsg-1ubuntu1+esm1 | Not reported | Not reported | Not reported |
| Ubuntu | qt5-qmake-bin | deb | noble | 5.15.13+dfsg-1ubuntu1+esm1 | Not reported | Not reported | Not reported |
| Ubuntu | qt5-xdgdesktopportal-platformtheme | deb | noble | 5.15.13+dfsg-1ubuntu1+esm1 | Not reported | Not reported | Not reported |
| Ubuntu | qtbase5-dev | deb | noble | 5.15.13+dfsg-1ubuntu1+esm1 | Not reported | Not reported | Not reported |
| Ubuntu | qtbase5-dev-tools | deb | noble | 5.15.13+dfsg-1ubuntu1+esm1 | Not reported | Not reported | Not reported |
| Ubuntu | qtbase5-doc | deb | noble | 5.15.13+dfsg-1ubuntu1+esm1 | Not reported | Not reported | Not reported |
| Ubuntu | qtbase5-doc-dev | deb | noble | 5.15.13+dfsg-1ubuntu1+esm1 | Not reported | Not reported | Not reported |
| Ubuntu | qtbase5-doc-html | deb | noble | 5.15.13+dfsg-1ubuntu1+esm1 | Not reported | Not reported | Not reported |
| Ubuntu | qtbase5-examples | deb | noble | 5.15.13+dfsg-1ubuntu1+esm1 | Not reported | Not reported | Not reported |
| Ubuntu | qtbase5-private-dev | deb | noble | 5.15.13+dfsg-1ubuntu1+esm1 | Not reported | Not reported | Not reported |
| Opensuse | libqt5-qtbase | rpm | tumbleweed | 5.15.2+kde294-4.1 | Not reported | OPENSUSE-SU-2024:11879-1 | Not reported |
| Opensuse | qutebrowser | rpm | tumbleweed | 2.5.0-1.1 | Not reported | OPENSUSE-SU-2024:11974-1 | Not reported |
| Opensuse | qt6-base | rpm | tumbleweed | 6.2.3-2.1 | Not reported | OPENSUSE-SU-2024:11886-1 | Not reported |
OpenFactory catalog packages
[openSUSE Tumbleweed]
- [libQt5Bootstrap-devel-static]Unknown
Source package: [libqt5-qtbase]
Details (1)
5.15.19+kde96-1.3· x86_64 · tumbleweedUnknown · Fixed:
5.15.2+kde294-4.1Version impact unknown
usn · libqt5-qtbase · opensuse · tumbleweed
- [libQt5Bootstrap-devel-static-32bit]Unknown
Source package: [libqt5-qtbase]
Details (1)
5.15.19+kde96-1.3· x86_64 · tumbleweedUnknown · Fixed:
5.15.2+kde294-4.1Version impact unknown
usn · libqt5-qtbase · opensuse · tumbleweed
- [libQt5Concurrent5]Unknown
Source package: [libqt5-qtbase]
Details (1)
5.15.19+kde96-1.3· x86_64 · tumbleweedUnknown · Fixed:
5.15.2+kde294-4.1Version impact unknown
usn · libqt5-qtbase · opensuse · tumbleweed
- [libQt5Concurrent5-32bit]Unknown
Source package: [libqt5-qtbase]
Details (1)
5.15.19+kde96-1.3· x86_64 · tumbleweedUnknown · Fixed:
5.15.2+kde294-4.1Version impact unknown
usn · libqt5-qtbase · opensuse · tumbleweed
- [libQt5Concurrent-devel]Unknown
Source package: [libqt5-qtbase]
Details (1)
5.15.19+kde96-1.3· x86_64 · tumbleweedUnknown · Fixed:
5.15.2+kde294-4.1Version impact unknown
usn · libqt5-qtbase · opensuse · tumbleweed
- [libQt5Concurrent-devel-32bit]Unknown
Source package: [libqt5-qtbase]
Details (1)
5.15.19+kde96-1.3· x86_64 · tumbleweedUnknown · Fixed:
5.15.2+kde294-4.1Version impact unknown
usn · libqt5-qtbase · opensuse · tumbleweed
- [libQt5Core5]Unknown
Source package: [libqt5-qtbase]
Details (1)
5.15.19+kde96-1.3· x86_64 · tumbleweedUnknown · Fixed:
5.15.2+kde294-4.1Version impact unknown
usn · libqt5-qtbase · opensuse · tumbleweed
- [libQt5Core5-32bit]Unknown
Source package: [libqt5-qtbase]
Details (1)
5.15.19+kde96-1.3· x86_64 · tumbleweedUnknown · Fixed:
5.15.2+kde294-4.1Version impact unknown
usn · libqt5-qtbase · opensuse · tumbleweed
- [libQt5Core-devel]Unknown
Source package: [libqt5-qtbase]
Details (1)
5.15.19+kde96-1.3· x86_64 · tumbleweedUnknown · Fixed:
5.15.2+kde294-4.1Version impact unknown
usn · libqt5-qtbase · opensuse · tumbleweed
- [libQt5Core-devel-32bit]Unknown
Source package: [libqt5-qtbase]
Details (1)
5.15.19+kde96-1.3· x86_64 · tumbleweedUnknown · Fixed:
5.15.2+kde294-4.1Version impact unknown
usn · libqt5-qtbase · opensuse · tumbleweed
- [libQt5Core-private-headers-devel]Unknown
Source package: [libqt5-qtbase]
Details (1)
5.15.19+kde96-1.3· noarch · tumbleweedUnknown · Fixed:
5.15.2+kde294-4.1Version impact unknown
usn · libqt5-qtbase · opensuse · tumbleweed
- [libQt5DBus5]Unknown
Source package: [libqt5-qtbase]
Details (1)
5.15.19+kde96-1.3· x86_64 · tumbleweedUnknown · Fixed:
5.15.2+kde294-4.1Version impact unknown
usn · libqt5-qtbase · opensuse · tumbleweed
- [libQt5DBus5-32bit]Unknown
Source package: [libqt5-qtbase]
Details (1)
5.15.19+kde96-1.3· x86_64 · tumbleweedUnknown · Fixed:
5.15.2+kde294-4.1Version impact unknown
usn · libqt5-qtbase · opensuse · tumbleweed
- [libQt5DBus-devel]Unknown
Source package: [libqt5-qtbase]
Details (1)
5.15.19+kde96-1.3· x86_64 · tumbleweedUnknown · Fixed:
5.15.2+kde294-4.1Version impact unknown
usn · libqt5-qtbase · opensuse · tumbleweed
- [libQt5DBus-devel-32bit]Unknown
Source package: [libqt5-qtbase]
Details (1)
5.15.19+kde96-1.3· x86_64 · tumbleweedUnknown · Fixed:
5.15.2+kde294-4.1Version impact unknown
usn · libqt5-qtbase · opensuse · tumbleweed
- [libQt5DBus-private-headers-devel]Unknown
Source package: [libqt5-qtbase]
Details (1)
5.15.19+kde96-1.3· noarch · tumbleweedUnknown · Fixed:
5.15.2+kde294-4.1Version impact unknown
usn · libqt5-qtbase · opensuse · tumbleweed
- [libQt5Gui5]Unknown
Source package: [libqt5-qtbase]
Details (1)
5.15.19+kde96-1.3· x86_64 · tumbleweedUnknown · Fixed:
5.15.2+kde294-4.1Version impact unknown
usn · libqt5-qtbase · opensuse · tumbleweed
- [libQt5Gui5-32bit]Unknown
Source package: [libqt5-qtbase]
Details (1)
5.15.19+kde96-1.3· x86_64 · tumbleweedUnknown · Fixed:
5.15.2+kde294-4.1Version impact unknown
usn · libqt5-qtbase · opensuse · tumbleweed
- [libQt5Gui-devel]Unknown
Source package: [libqt5-qtbase]
Details (1)
5.15.19+kde96-1.3· x86_64 · tumbleweedUnknown · Fixed:
5.15.2+kde294-4.1Version impact unknown
usn · libqt5-qtbase · opensuse · tumbleweed
- [libQt5Gui-devel-32bit]Unknown
Source package: [libqt5-qtbase]
Details (1)
5.15.19+kde96-1.3· x86_64 · tumbleweedUnknown · Fixed:
5.15.2+kde294-4.1Version impact unknown
usn · libqt5-qtbase · opensuse · tumbleweed
Observed:
References
- [https://access.redhat.com/errata/RHSA-2022:7482]
- [https://ftp.suse.com/pub/projects/security/csaf/rhsa-2022_7482.json]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:11879-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:11886-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:11974-1]
- [https://security-tracker.debian.org/tracker/CVE-2022-25255]
- [https://ubuntu.com/security/notices/USN-8076-1]
- [https://wid.cert-bund.de/.well-known/csaf/white/2022/wid-sec-w-2022-1991.json]
[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]