CVE-2025-6338

Name	CVE-2025-6338
Description	There is an incomplete cleanup vulnerability in Qt Network's Schannel support on Windows which can lead to a Denial of Service over a long period.This issue affects Qt from 5.15.0 through 6.8.3, from 6.9.0 before 6.9.2.
Source	CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
qt6-base (PTS)	bookworm	6.4.2+dfsg-10	fixed
	trixie	6.8.2+dfsg-9	fixed
	forky	6.9.2+dfsg-2	fixed
	sid	6.9.2+dfsg-3	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
qt6-base	source	(unstable)	(not affected)

- qt6-base <not-affected> (Only affects QT on Windows)
https://codereview.qt-project.org/c/qt/qtbase/+/651495