← Back

CVE-2025-30348

nvd nist
Published: Mar 21, 2025Modified: Jun 17, 2026

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Exploitability: 3.9 / Impact: 1.4
Source: NVD

Description

encodeText in QDom in Qt before 6.8.0 has a complex algorithm involving XML string copy and inline replacement of parts of a string (with relocation of later data).

Affected (3)

Products: Qt: Qt
Qt
1 product
Qt
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Qt
Qt
Before 5.15.19
Qt
From 6.0.0 to 6.5.9
Qt
From 6.6.0 to 6.8.0

Related CWEs

CWE-407
Inefficient Algorithmic Complexity
An algorithm in a product has an inefficient worst-case computational complexity that may be detrimental to system performance and can be triggered by an attacker, typically using crafted manipulations that ensure that the worst case is being reached.

References (1)

Source: cve@mitre.org
Patch

Timeline

No history available yet.