CVE catalog
CVE-2022-25634
qt6-base: CVE-2022-25634
- Severity
- High · CVSS 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 1.96% · Oct 25, 2026
Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | qt6-base | sid | 6.11.2+dfsg-7 | not affected |
| Debian | qt6-base | forky | 6.11.2+dfsg-5 | not affected |
| Debian | qt6-base | trixie | 6.8.2+dfsg-9+deb13u2 | not affected |
| Debian | qt6-base | bookworm | 6.4.2+dfsg-10 | not affected |
| Debian | qtbase-opensource-src | sid | 5.15.19+dfsg-6 | not affected |
| Debian | qtbase-opensource-src | forky | 5.15.19+dfsg-5 | not affected |
| Debian | qtbase-opensource-src | trixie | 5.15.15+dfsg-6+deb13u1 | not affected |
| Debian | qtbase-opensource-src | bookworm | 5.15.8+dfsg-11+deb12u3 | not affected |
| Debian | qtbase-opensource-src-gles | sid | 5.15.19+dfsg-2 | not affected |
| Debian | qtbase-opensource-src-gles | forky | 5.15.19+dfsg-2 | not affected |
| Debian | qtbase-opensource-src-gles | trixie | 5.15.15+dfsg-2 | not affected |
| Debian | qtbase-opensource-src-gles | bookworm | 5.15.8+dfsg-3 | not affected |
| Ubuntu | qtbase-opensource-src-gles | 16.04 | 5.4.2+dfsg-2ubuntu9 | vulnerable |
| Ubuntu | qtbase-opensource-src-gles | 16.04 | 5.5.1+dfsg-6ubuntu1 | vulnerable |
| Ubuntu | qtbase-opensource-src-gles | 16.04 | 5.5.1+dfsg-10ubuntu1 | vulnerable |
| Ubuntu | qtbase-opensource-src-gles | 16.04 | 5.5.1+dfsg-13ubuntu1 | vulnerable |
| Ubuntu | qtbase-opensource-src-gles | 16.04 | 5.5.1+dfsg-13ubuntu2 | vulnerable |
| Ubuntu | qtbase-opensource-src-gles | 16.04 | 5.5.1+dfsg-13ubuntu3 | vulnerable |
| Ubuntu | qtbase-opensource-src-gles | 16.04 | 5.5.1+dfsg-14ubuntu1 | vulnerable |
| Ubuntu | qtbase-opensource-src-gles | 16.04 | 5.5.1+dfsg-14ubuntu2 | vulnerable |
| Ubuntu | qtbase-opensource-src-gles | 16.04 | 5.5.1+dfsg-14ubuntu3 | vulnerable |
| Ubuntu | qtbase-opensource-src-gles | 16.04 | 5.5.1+dfsg-15ubuntu1 | vulnerable |
| Ubuntu | qtbase-opensource-src-gles | 16.04 | 5.5.1+dfsg-16ubuntu1 | vulnerable |
| Ubuntu | qtbase-opensource-src-gles | 16.04 | 5.5.1+dfsg-16ubuntu4 | vulnerable |
| Ubuntu | qtbase-opensource-src-gles | 16.04 | 5.5.1+dfsg-16ubuntu5 | vulnerable |
| Ubuntu | qtbase-opensource-src-gles | 16.04 | 5.5.1+dfsg-16ubuntu6 | vulnerable |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | qt6-base | source | sid | Not affected | unimportant | Not reported | Not reported |
| Debian | qt6-base | source | forky | Not affected | unimportant | Not reported | Not reported |
| Debian | qt6-base | source | trixie | Not affected | unimportant | Not reported | Not reported |
| Debian | qt6-base | source | bookworm | Not affected | unimportant | Not reported | Not reported |
| Debian | qtbase-opensource-src | source | sid | Not affected | unimportant | Not reported | Not reported |
| Debian | qtbase-opensource-src | source | forky | Not affected | unimportant | Not reported | Not reported |
| Debian | qtbase-opensource-src | source | trixie | Not affected | unimportant | Not reported | Not reported |
| Debian | qtbase-opensource-src | source | bookworm | Not affected | unimportant | Not reported | Not reported |
| Debian | qtbase-opensource-src-gles | source | sid | Not affected | unimportant | Not reported | Not reported |
| Debian | qtbase-opensource-src-gles | source | forky | Not affected | unimportant | Not reported | Not reported |
| Debian | qtbase-opensource-src-gles | source | trixie | Not affected | unimportant | Not reported | Not reported |
| Debian | qtbase-opensource-src-gles | source | bookworm | Not affected | unimportant | Not reported | Not reported |
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [libqt5concurrent5]Not affected
Source package: [qtbase-opensource-src]
Details (2)
5.15.8+dfsg-11+deb12u3· amd64 · bookwormNot affected
dsa · qtbase-opensource-src · debian · bookworm
5.15.8+dfsg-11+deb12u3· arm64 · bookwormNot affected
dsa · qtbase-opensource-src · debian · bookworm
- [libqt5core5a]Not affected
Source package: [qtbase-opensource-src]
Details (2)
5.15.8+dfsg-11+deb12u3· amd64 · bookwormNot affected
dsa · qtbase-opensource-src · debian · bookworm
5.15.8+dfsg-11+deb12u3· arm64 · bookwormNot affected
dsa · qtbase-opensource-src · debian · bookworm
- [libqt5dbus5]Not affected
Source package: [qtbase-opensource-src]
Details (2)
5.15.8+dfsg-11+deb12u3· amd64 · bookwormNot affected
dsa · qtbase-opensource-src · debian · bookworm
5.15.8+dfsg-11+deb12u3· arm64 · bookwormNot affected
dsa · qtbase-opensource-src · debian · bookworm
- [libqt5gui5]Not affected
Source package: [qtbase-opensource-src]
Details (2)
5.15.8+dfsg-11+deb12u3· amd64 · bookwormNot affected
dsa · qtbase-opensource-src · debian · bookworm
5.15.8+dfsg-11+deb12u3· arm64 · bookwormNot affected
dsa · qtbase-opensource-src · debian · bookworm
- [libqt5gui5-gles]Not affected
Source package: [qtbase-opensource-src-gles]
Details (2)
5.15.8+dfsg-3· amd64 · bookwormNot affected
dsa · qtbase-opensource-src-gles · debian · bookworm
5.15.8+dfsg-3· arm64 · bookwormNot affected
dsa · qtbase-opensource-src-gles · debian · bookworm
- [libqt5network5]Not affected
Source package: [qtbase-opensource-src]
Details (2)
5.15.8+dfsg-11+deb12u3· amd64 · bookwormNot affected
dsa · qtbase-opensource-src · debian · bookworm
5.15.8+dfsg-11+deb12u3· arm64 · bookwormNot affected
dsa · qtbase-opensource-src · debian · bookworm
- [libqt5opengl5]Not affected
Source package: [qtbase-opensource-src]
Details (2)
5.15.8+dfsg-11+deb12u3· amd64 · bookwormNot affected
dsa · qtbase-opensource-src · debian · bookworm
5.15.8+dfsg-11+deb12u3· arm64 · bookwormNot affected
dsa · qtbase-opensource-src · debian · bookworm
- [libqt5opengl5-dev]Not affected
Source package: [qtbase-opensource-src]
Details (2)
5.15.8+dfsg-11+deb12u3· amd64 · bookwormNot affected
dsa · qtbase-opensource-src · debian · bookworm
5.15.8+dfsg-11+deb12u3· arm64 · bookwormNot affected
dsa · qtbase-opensource-src · debian · bookworm
- [libqt5printsupport5]Not affected
Source package: [qtbase-opensource-src]
Details (2)
5.15.8+dfsg-11+deb12u3· amd64 · bookwormNot affected
dsa · qtbase-opensource-src · debian · bookworm
5.15.8+dfsg-11+deb12u3· arm64 · bookwormNot affected
dsa · qtbase-opensource-src · debian · bookworm
- [libqt5sql5]Not affected
Source package: [qtbase-opensource-src]
Details (2)
5.15.8+dfsg-11+deb12u3· amd64 · bookwormNot affected
dsa · qtbase-opensource-src · debian · bookworm
5.15.8+dfsg-11+deb12u3· arm64 · bookwormNot affected
dsa · qtbase-opensource-src · debian · bookworm
- [libqt5sql5-ibase]Not affected
Source package: [qtbase-opensource-src]
Details (2)
5.15.8+dfsg-11+deb12u3· amd64 · bookwormNot affected
dsa · qtbase-opensource-src · debian · bookworm
5.15.8+dfsg-11+deb12u3· arm64 · bookwormNot affected
dsa · qtbase-opensource-src · debian · bookworm
- [libqt5sql5-mysql]Not affected
Source package: [qtbase-opensource-src]
Details (2)
5.15.8+dfsg-11+deb12u3· amd64 · bookwormNot affected
dsa · qtbase-opensource-src · debian · bookworm
5.15.8+dfsg-11+deb12u3· arm64 · bookwormNot affected
dsa · qtbase-opensource-src · debian · bookworm
- [libqt5sql5-odbc]Not affected
Source package: [qtbase-opensource-src]
Details (2)
5.15.8+dfsg-11+deb12u3· amd64 · bookwormNot affected
dsa · qtbase-opensource-src · debian · bookworm
5.15.8+dfsg-11+deb12u3· arm64 · bookwormNot affected
dsa · qtbase-opensource-src · debian · bookworm
- [libqt5sql5-psql]Not affected
Source package: [qtbase-opensource-src]
Details (2)
5.15.8+dfsg-11+deb12u3· amd64 · bookwormNot affected
dsa · qtbase-opensource-src · debian · bookworm
5.15.8+dfsg-11+deb12u3· arm64 · bookwormNot affected
dsa · qtbase-opensource-src · debian · bookworm
- [libqt5sql5-sqlite]Not affected
Source package: [qtbase-opensource-src]
Details (2)
5.15.8+dfsg-11+deb12u3· amd64 · bookwormNot affected
dsa · qtbase-opensource-src · debian · bookworm
5.15.8+dfsg-11+deb12u3· arm64 · bookwormNot affected
dsa · qtbase-opensource-src · debian · bookworm
- [libqt5sql5-tds]Not affected
Source package: [qtbase-opensource-src]
Details (2)
5.15.8+dfsg-11+deb12u3· amd64 · bookwormNot affected
dsa · qtbase-opensource-src · debian · bookworm
5.15.8+dfsg-11+deb12u3· arm64 · bookwormNot affected
dsa · qtbase-opensource-src · debian · bookworm
- [libqt5test5]Not affected
Source package: [qtbase-opensource-src]
Details (2)
5.15.8+dfsg-11+deb12u3· amd64 · bookwormNot affected
dsa · qtbase-opensource-src · debian · bookworm
5.15.8+dfsg-11+deb12u3· arm64 · bookwormNot affected
dsa · qtbase-opensource-src · debian · bookworm
- [libqt5widgets5]Not affected
Source package: [qtbase-opensource-src]
Details (2)
5.15.8+dfsg-11+deb12u3· amd64 · bookwormNot affected
dsa · qtbase-opensource-src · debian · bookworm
5.15.8+dfsg-11+deb12u3· arm64 · bookwormNot affected
dsa · qtbase-opensource-src · debian · bookworm
- [libqt5xml5]Not affected
Source package: [qtbase-opensource-src]
Details (2)
5.15.8+dfsg-11+deb12u3· amd64 · bookwormNot affected
dsa · qtbase-opensource-src · debian · bookworm
5.15.8+dfsg-11+deb12u3· arm64 · bookwormNot affected
dsa · qtbase-opensource-src · debian · bookworm
- [libqt6concurrent6]Not affected
Source package: [qt6-base]
Details (2)
6.4.2+dfsg-10· amd64 · bookwormNot affected
dsa · qt6-base · debian · bookworm
6.4.2+dfsg-10· arm64 · bookwormNot affected
dsa · qt6-base · debian · bookworm
Observed:
References
- [https://cert-portal.siemens.com/productcert/csaf/ssa-188491.json]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2022-25634]
- [https://security-tracker.debian.org/tracker/CVE-2022-25634]
- [https://wid.cert-bund.de/.well-known/csaf/white/2022/wid-sec-w-2023-2403.json]
[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]