CVE-2025-12385, a critical vulnerability in the mingw-qt5-qtdeclarative component of the Qt software toolkit, has been addressed. The issue involves improper validation of tag size in the Text component parser.
The vulnerability has been backported in the mingw-qt5 package version 5.15.18-4. The fix was released on October 31, 2026, and users are advised to update their systems to this version.
The mingw-qt5 package is essential for developing applications using the Qt toolkit. The vulnerability is considered critical due to its potential impact, and exploitation has been reported.
Users can install the updates using the 'dnf' update program to ensure their systems are protected against this vulnerability.