UnratedRed Hat & Ubuntu Linux

QT WebEngine vulnerability

USN-8347-1 Published May 28, 2026

CVE-2025-9900

Affected products & platforms

Red Hat & Ubuntu LinuxUnclassified

Summary

It was discovered that the vendored LibTIFF in QT WebEngine incorrectly handled memory when parsing malformed TIFF image metadata. An attacker could possibly use this issue to cause a denial of service, obtain sensitive information, or execute arbitrary code. Affected Ubuntu releases: 26.04, 24.04, 22.04, 20.04, 18.04. CVEs: CVE-2025-9900.

Affected versions

Ubuntu 26.04
Ubuntu 24.04
Ubuntu 22.04
Ubuntu 20.04
Ubuntu 18.04

Official advisory · medium-confidence parse· fetched 3 hours ago·verify at source

Mitigation checklist

Recommended fix / mitigation

Apply available updates: `sudo apt update && sudo apt upgrade` (a standard system update installs the fix).

Official advisory · medium-confidence parse· fetched 3 hours ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.