First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2025-23050

LowCVSS 3.1/10Last modified Oct 19, 2026

Description

QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read (or division by zero). This is fixed in 5.15.19, 6.5.9, and 6.8.2.

Metrics

CVSS 3.1 3.1/10CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

Affected software

Vendor	Product	Versions
Qt	Qt	< 5.15.19; >= 6.0.0, < 6.5.9; >= 6.6.0, < 6.8.2

References

Timeline

Published: Oct 31, 2025
Last modified: Oct 19, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-230517.2An authenticated parameter injection vulnerability exists in the web-based management interface of the AOS-8 and AOS-10 Operating Systems. S CVE-2025-230527.2Authenticated command injection vulnerability in the command line interface of a network management service. Successful exploitation of this CVE-2025-230536.5A privilege escalation vulnerability exists in the web-based management interface of HPE Aruba Networking Fabric Composer. Successful exploi CVE-2025-230546.5A vulnerability in the web-based management interface of HPE Aruba Networking Fabric Composer could allow an authenticated low privilege ope CVE-2025-230555.4A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated remote attacker to cond CVE-2025-230565.4A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated remote attacker to cond CVE-2025-230575.4A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated remote attacker to cond CVE-2025-230588.1A vulnerability in the ClearPass Policy Manager web-based management interface allows a low-privileged (read-only) authenticated remote atta CVE-2025-230594.9A vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager exposes directories containing sensit CVE-2025-23065.9An Improper Access Control vulnerability was identified in the file download functionality. This vulnerability allows users to download sens CVE-2025-230608.1A vulnerability in HPE Aruba Networking ClearPass Policy Manager may, under certain circumstances, expose sensitive unencrypted information.CVE-2025-230619.8Mongoose before 8.9.5 can improperly use a nested $where filter with a populate() match, leading to search injection. NOTE: this issue exist

CVE-2025-23050: Low severity, CVSS 3.1 | Vulnix