CVE-2025-23050

Publication date 31 October 2025

Last updated 5 November 2025

Ubuntu priority

Medium

Why this priority?

Cvss 3 Severity Score

3.1 · Low

Score breakdown

Description

QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read (or division by zero). This is fixed in 5.15.19, 6.5.9, and 6.8.2.

Status

Package Ubuntu Release Status
qtconnectivity-opensource-src 26.04 LTS resolute
Not affected
25.10 questing Ignored end of life, was needs-triage
25.04 plucky Not in release
24.10 oracular Ignored end of life, was needs-triage
24.04 LTS noble
Needs evaluation
22.04 LTS jammy
Needs evaluation
20.04 LTS focal
Needs evaluation
18.04 LTS bionic
Needs evaluation
16.04 LTS xenial
Needs evaluation
qt6-connectivity 26.04 LTS resolute
Not affected
25.10 questing
Not affected
25.04 plucky
Not affected
24.10 oracular Ignored end of life, was needs-triage
24.04 LTS noble
Needs evaluation
22.04 LTS jammy
Needs evaluation
20.04 LTS focal Not in release

Severity score breakdown

CVSS version: CVSS v3.0

Base score 3.1 · Low

Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

References

Other references

Access our resources on patching vulnerabilities