Unrated

encodeText in QDom in Qt before 6.8.0 has a complex algorithm involving XML string copy and inline replacement of parts of a string (with relocation o...

CVE-2025-30348 First seen on SecPulse Mar 21, 2025

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2025-30348 qt6-base
Ubuntu UBUNTU-CVE-2025-30348 qtbase-opensource-src

Original description The description as published by the source.

encodeText in QDom in Qt before 6.8.0 has a complex algorithm involving XML string copy and inline replacement of parts of a string (with relocation of later data).

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
web codereview.qt-project.org

Key facts

Severity: Unrated
Published: Mar 21, 2025
First seen on SecPulse: Mar 21, 2025
CWE: CWE-407

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)01:22