CVE-2025-6338 — Possible denial of service with multiple incoming connections to a Schannel based server with a TLS backend

CVE-2025-6338

Possible denial of service with multiple incoming connections to a Schannel based server with a TLS backend PUBLISHED

Description (CNA)

There is an incomplete cleanup vulnerability in Qt Network's Schannel support on Windows which can lead to a Denial of Service over a long period. This issue affects Qt from 5.15.0 through 6.8.3, from 6.9.0 before 6.9.2.

Affected (CNA)

Vendor / product	Versions
Qt / Qt	unaffected 0 before 5.15.0; affected 5.15.0 through 6.8.3; unaffected 6.8.4 before 6.9.0; affected 6.9.0 before 6.9.2

CWE

CWE-459

References

https://codereview.qt-project.org/c/qt/qtbase/+/651495

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.