CVE-2024-25580

[CVE catalog]

Severity

Medium · CVSS 6.2CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Published

Feb 15, 2024, 11:00:00 PM UTC

Source

[NVD] · [CVE record]

EPSS

0.32% · Oct 25, 2026

A vulnerability has been discovered in Qt Base, wherein an attacker can exploit a specially crafted KTX image file to induce a buffer overflow within the application parsing it. This overflow can subsequently result in a denial-of-service condition, rendering the affected application inaccessible or non-responsive. qtbase: potential buffer overflow when reading KTX images The CVE-2024-25580 vulnerability in Qt's KTX image handling module is classified as having a moderate severity rather than being deemed important due to several factors. While the vulnerability does pose a risk of buffer overflow and potential application crashes, its impact is somewhat mitigated by the fact that exploitation requires a specifically crafted KTX image file. This implies that successful exploitation depends on the attacker's ability to provide such a file to the target application. Moreover, the vulnerability does not inherently lead to remote code execution or compromise of sensitive data; it primarily results in a denial-of-service condition through application crashes. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.