CVE-2024-25580

What it actually does

Buffer overflow in KTX image parsing code allows out-of-bounds memory writes and application crash when a specially crafted KTX file is processed.

Why it matters to the business

Applications using affected Qt versions can crash when loading untrusted images, causing denial of service; in worst cases this may enable remote code execution if memory corruption is leveraged.

How an attack unfolds

An attacker crafts a malicious KTX image file that triggers the overflow in qktxhandler.cpp, then causes a victim application to load the file through normal image handling paths.

How to fix it

Upgrade Qt to 5.15.17, 6.2.12, 6.5.5, 6.6.2 or later; for qtbase GIT apply commit 8e79bee4afa2a1466f360f44fb07d24e432a82a6.

How to confirm the fix worked

Confirm the installed Qt version is at or above the fixed releases, then test image loading with known-good and known-bad KTX samples to verify no crash occurs.

Typical attack path

1. Attacker prepares a malformed KTX file exploiting the parsing flaw
2. Malicious image is delivered via web, email, file share, or application input
3. Target application using vulnerable Qt loads and parses the KTX file
4. Buffer overflow occurs, potentially leading to crash or arbitrary code execution

How to detect it

Review application logs and crash reports for unexpected terminations during KTX or image file processing; look for Qt-based processes handling untrusted image inputs shortly before crashes.

What your security team should do

• Immediately update all Qt installations to the fixed versions listed
• Scan codebases and containers for references to vulnerable Qt versions
• Restrict processing of untrusted KTX or image files until patched
• Monitor EPSS and threat intel for any increase in exploit activity