{"action":"Upgrade qtdeclarative-opensource-src to 5.15.17+dfsg-4 or later.","affected":[{"fixed":"5.15.17+dfsg-4","introduced":"0"}],"component":"qtdeclarative-opensource-src","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["5.15.17+dfsg-4"],"id":"tcs_01M5NMWDH8YZYRATCEJ3JS11AV","modified_at":"2026-10-23T18:04:34.908479791Z","published_at":"2025-12-03T20:16:24.170Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2025-12385","https://security-tracker.debian.org/tracker/CVE-2025-12385"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2025-12385#Debian:14/qtdeclarative-opensource-src","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2025-12385"}],"summary":"Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32"}