BSD Portsqt6-base -- DoS in QColorTransferGenericFunction
Andy Shaw reports: When passing values outside of the expected range to QColorTransferGenericFunction it can cause a denial of service, for example, this can happen when passing a specifically crafted ICC profile to QColorSpace::fromICCProfile.
Affected versions
- qt6-base < 6.9.2
By system
1 still vulnerable, 1 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.
| System | Port | Version | State | Fixed |
|---|---|---|---|---|
| FreeBSD | devel/qt6-base | 6.11.2_1 | fixed | |
| MidnightBSD | devel/qt6-base | in range, by version | ||
| DragonFly | devel/qt6-base | 6.8.3_1 | vulnerable since 2025-08-28 |