Skip to content
Sign in
9.4 Critical

CVE-2025-10728 When the module renders a Svg file that contains a element, it might end up rendering it recursively leading to stack…

Description

When the module renders a Svg file that contains a <pattern> element, it might end up rendering it recursively leading to stack overflow DoS

Affected products and versions

Product Affected versions Fixed in
Qt 6.9 6.9.0 → 6.9.2 No fix stated
Qt 6.7 6.7.0 → 6.8.4 No fix stated
Qt 6.9 6.9.0 → 6.9.2 No fix stated
Qt 6.7 6.7.0 → 6.8.4 No fix stated

Other CVEs of Qt

The 13 CVEs of Qt →
CVE-2025-14575 An Uncontrolled Search Path Element vulnerability in the OpenSSL TLS backend of Qt Network (qtbase) in Qt Qt Framework… 1.8 Low CVE-2026-6210 A type confusion vulnerability in Qt SVG allows an attacker to cause an application crash via a crafted SVG image 8.7 High CVE-2025-14576 Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading… 7.4 High CVE-2025-12385 Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability… 8.7 High
Track this CVE