qt5-qtdeclarative security update

An update is available for qt5-qtdeclarative. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Qt5 - QtDeclarative component. Security Fixes: qt5-qtdeclarative:...

RLSA-2026:98531 Important: qt5-qtdeclarative security update

Qt5 - QtDeclarative component. Security Fixes: qt5-qtdeclarative: qt6-qtdeclarative: Improper validation of tag size in Text component parser CVE-2025-12385 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the...

qt5-qtdeclarative: qt6-qtdeclarative: Improper validation of <img> tag size in Text component parser

A flaw was found in the Qt Quick Text component of Qt. Due to missing validation of the width and height attributes in image tags, an attacker can trigger excessive resource allocation by supplying specially crafted content. This flaw allows an application to freeze or become unresponsive,...

Important: Red Hat Security Advisory: qt5-qtdeclarative security update

An update for qt5-qtdeclarative is now available for Red Hat Enterprise Linux 9.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

SUSE CVE-2025-12385

Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation. This issue affects users of the Text component in Qt Quick...

RHEL 9 : qt5-qtdeclarative (RHSA-2026:99127)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:99127 advisory. Qt5 - QtDeclarative component. Security Fixes: qt5-qtdeclarative: qt6-qtdeclarative: Improper validation of tag size in Text component parser...

CVE-2026-124885

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Graphics: Text component...

CVE-2026-124853

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions in the Graphics: Text component...

qt5-qtdeclarative: qt6-qtdeclarative: Improper validation of <img> tag size in Text component parser

A flaw was found in the Qt Quick Text component of Qt. Due to missing validation of the width and height attributes in image tags, an attacker can trigger excessive resource allocation by supplying specially crafted content. This flaw allows an application to freeze or become unresponsive,...

Important: Red Hat Security Advisory: qt5-qtdeclarative security update

An update for qt5-qtdeclarative is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Oracle Linux 8 : qt5-qtdeclarative (ELSA-2026-96075)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-96075 advisory. 5.15.3-3 - CVE-2025-12385 qt5-qtdeclarative: Improper validation of tag size in Text component parser Resolves: RHEL-287799 Tenable has extracted the preceding...

RHEL 9 : qt5-qtdeclarative (RHSA-2026:98531)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:98531 advisory. Qt5 - QtDeclarative component. Security Fixes: qt5-qtdeclarative: qt6-qtdeclarative: Improper validation of tag size in Text component parser...

Rocky Linux 8 [CIQ] Security Update: qt5-qtdeclarative / qt5-qtdeclarative-debuginfo / etc (crlsa-2026_96075)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202696075 advisory. qt5-qtdeclarative: qt6-qtdeclarative: Improper validation of tag size in Text component parser CVE-2025-12385 Tenable has extracted the preceding description block...

qt5-qtdeclarative security update

An update is available for qt5-qtdeclarative. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Qt5 - QtDeclarative component. Security Fixes: qt5-qtdeclarative:...

RLSA-2026:96075 Important: qt5-qtdeclarative security update

Qt5 - QtDeclarative component. Security Fixes: qt5-qtdeclarative: qt6-qtdeclarative: Improper validation of tag size in Text component parser CVE-2025-12385 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the...

MiracleLinux 8 : qt5-qtdeclarative-5.15.3-3.el8_10 (AXSA:2026-2301:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2301:01 advisory. qt5-qtdeclarative: qt6-qtdeclarative: Improper validation of tag size in Text component parser CVE-2025-12385 Tenable has extracted the preceding description...

AlmaLinux 8 : qt5-qtdeclarative (ALSA-2026:96075)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:96075 advisory. qt5-qtdeclarative: qt6-qtdeclarative: Improper validation of tag size in Text component parser CVE-2025-12385 Tenable has extracted the preceding description bloc...

Mozilla Firefox ESR < 115.45

The version of Firefox ESR installed on the remote Windows host is prior to 115.45. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-126 advisory. - Sandbox escape due to use-after-free in the IPC component. This vulnerability was fixed in Firefox 160, Firefox...

RockyLinux 8 : qt5-qtdeclarative (RLSA-2026:96075)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:96075 advisory. qt5-qtdeclarative: qt6-qtdeclarative: Improper validation of tag size in Text component parser CVE-2025-12385 Tenable has extracted the preceding description blo...

qt5-qtdeclarative: qt6-qtdeclarative: Improper validation of <img> tag size in Text component parser

A flaw was found in the Qt Quick Text component of Qt. Due to missing validation of the width and height attributes in image tags, an attacker can trigger excessive resource allocation by supplying specially crafted content. This flaw allows an application to freeze or become unresponsive,...