---
id: CVE-2025-5683
title: "When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash.\_\n\nThis issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0"
summary: "When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash.\_\n\nThis issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1."
severity: medium
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
cwe:
  - CWE-770
vendor: qt
product: qt
affected:
  - 'qt >= 6.3.0, < 6.5.10'
  - 'qt >= 6.6.0, < 6.8.5'
  - 'qt >= 6.9.0, < 6.9.1'
patched:
  - qt 6.9.1
published: '2025-06-05'
updated: '2026-07-29'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-5683'
references:
  - url: 'https://codereview.qt-project.org/c/qt/qtimageformats/+/644548'
    label: a59d8014-47c4-4630-ab43-e1b13cbe58e3
  - url: 'https://issues.oss-fuzz.com/issues/415350704'
    label: a59d8014-47c4-4630-ab43-e1b13cbe58e3
tags:
  - nvd
epss: 0.00235
epssPercentile: 0.14703
ingestedAt: '2026-07-29T09:45:30.637Z'
---

## Overview

When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. 

This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1.

## Affected

- `qt >= 6.3.0, < 6.5.10`
- `qt >= 6.6.0, < 6.8.5`
- `qt >= 6.9.0, < 6.9.1`

## Remediation

Upgrade past the affected range:

- `qt 6.9.1`