View at Official debian advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2025-23050 not yet assigned priority: Debian including 2 source packages (qt6-connectivity, qtconnectivity-opensource-src), 8 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 5, open 3.
QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read (or division by zero). This is fixed in 5.15.19, 6.5.9, and 6.8.2.