Skip to content
CVE PROGRAM SOURCE RECORD9.4 Critical

CVE-2025-10729

Use-after-free vulnerability in Qt SVG qsvghandler.cpp allows denial of service via crafted SVG

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
TQtC

Description

The module will parse a <pattern> node which is not a child of a structural node. The node will be deleted after creation but might be accessed later leading to a use after free.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Qt Qt

Default version status: unaffected

  • 6.7.0 to ≤ 6.8.4affected
  • 6.9.0 to ≤ 6.9.2affected

References