CVE-2015-0295: The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color c...

Security readout for executives and security teams

A crafted BMP image can crash software that uses the affected QtGui BMP decoder in Qt before 5.5. The known impact is denial of service, not data theft or code execution. Business urgency depends on whether user-supplied images are opened, previewed, or processed by Qt-based applications. Exposure is most likely where Qt before 5.5 is embedded in applications that load untrusted BMP files. Prioritize image viewers, document workflows, email attachment handling, thumbnail generators, and desktop tools using QtGui. Confirm actual exposure through package inventories and application dependency manifests. Handle during normal vulnerability remediation unless a business-critical service processes untrusted images automatically. Raise priority if crashes could disrupt customer-facing workflows, batch processing, or shared desktop environments. Mitigation focus: Upgrade affected Qt packages using vendor security updates.; For source-built Qt, check the Qt advisory and move beyond affected versions.; Limit or block untrusted BMP processing in exposed workflows until updated..

Prepared

Jun 13, 2026, 22:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.