CVE-2022-25255
qt: QProcess could execute a binary from the current working directory when not found in the PATH
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · February 16, 2022
Updated · November 22, 2025
Description
A flaw was found in qt. The vulnerability occurs due to executing binaries from the current directory when the loading path failed, leading to an uncontrolled path element vulnerability. This flaw allows an attacker to execute malicious executables.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-427 · Uncontrolled Search Path Element