Qt QtBluetooth CVE-2025-23050 Buffer Over-read and Division by Zero

Vulnerability Description: A security issue involving a read past the end of the buffer and division by zero has been discovered in QLowEnergyController on Linux, and has been assigned the CVE identifier CVE-2025-23050. Affected Versions: Qt versions from 5.4.0 to 5.15.18, 6.0.0 to 6.5.8, and 6.6.0 to 6.8.1. Impact: QLowEnergyController on Linux uses both a BlueZ DBus backend and a Bluetooth Kernel API backend. When using the Bluetooth Kernel API backend, QtBluetooth creates a Bluetooth L2CAP socket to establish a connection with an external Bluetooth Low Energy (BLE) device. After the connection is established, the external BLE device can send malformed Bluetooth ATT (Attribute Protocol) commands, triggering buffer over-read and division by zero errors. This vulnerability affects both central and peripheral roles. Solution: Apply the provided patches or upgrade to Qt 6.9.0, 6.8.2, 6.5.9, or 5.15.19 to resolve the issue. Patches: dev: https://codereview.qt-project.org/c/qt/qtconnectivity/+/614538 Qt 6.9: https://codereview.qt-project.org/c/qt/qtconnectivity/+/616915/2 Qt 6.8: https://codereview.qt-project.org/c/qt/qtconnectivity/+/617004 or https://download.qt.io/official_releases/qt/6.8/6.8.0/src/CVE-2025-23050-qtconnectivity-6.8.diff Qt 6.5: https://codereview.qt-project.org/c/qt/tqtc-qtconnectivity/+/617086 or https://download.qt.io/official_releases/qt/6.5.0/CVE-2025-23050-qtconnectivity-6.5.diff Qt 5.15: https://codereview.qt-project.org/c/qt/tqtc-qtconnectivity/+/617371 or https://download.qt.io/official_releases/qt/5.15/CVE-2025-23050-qtconnectivity-5.15.diff

Goal Reached Thanks to every supporter — we hit 100%!

Qt QtBluetooth CVE-2025-23050 Buffer Over-read and Division by Zero