CVE-2022-25634: 
NixOS vulnerability analysis and mitigation

Qt through versions 5.15.8 and 6.x through 6.2.3 contains a vulnerability that allows the loading of system library files from an unintended working directory. This security issue specifically affects platform-specific code targeting Windows systems (NVD, Red Hat).

The vulnerability has been assigned a CVSS 3.1 base score of 7.5 (High), with the following characteristics: Network attack vector, Low attack complexity, No privileges required, No user interaction needed, Unchanged scope, High confidentiality impact, and No impact on integrity or availability. The vulnerability vector string is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (Ubuntu).

The vulnerability primarily affects the confidentiality of the system, with a High impact rating in this category, while having no direct impact on system integrity or availability. The issue is specific to Windows platform implementations (Ubuntu).

The vulnerability presents high exploitability characteristics due to its network attack vector, low attack complexity, and no requirements for privileges or user interaction (Ubuntu).

Patches have been released to address this vulnerability, with fixes available through official Qt releases. The fixes involve modifications to how system libraries are loaded, particularly in Windows-specific code (Debian).