Vulnerability-Lookup

CVE-2026-8168 (GCVE-0-2026-8168)

Vulnerability from cvelistv5 – Published: 2026-10-19 13:08 – Updated: 2026-10-19 14:27

Title

Denial-of-service vulnerability in the SVG parser and renderer impacts Qt

Summary

Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module (QtSvg) in Qt Group Qt allows attackers to cause a denial of service (application crash via stack exhaustion) via a crafted SVG file with deeply nested elements.

Severity

7.1 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-19 14:27 UTC

CWE

CWE-674 - Uncontrolled Recursion

Assigner

Qt CNA under the mitre root

CNA scorecard A 91/100 over 13 records in the last 180 days details

References

11 references

URL	Tags
https://wiki.qt.io/List_of_known_vulnerabilities_…	vendor-advisory
https://codereview.qt-project.org/c/qt/qtsvg/+/730591	patch
https://codereview.qt-project.org/c/qt/qtsvg/+/730501	patch
https://codereview.qt-project.org/c/qt/qtsvg/+/731257	patch
https://codereview.qt-project.org/c/qt/qtsvg/+/730892	patch
https://codereview.qt-project.org/c/qt/qtsvg/+/733245	patch
https://codereview.qt-project.org/c/qt/qtsvg/+/738811	patch
https://codereview.qt-project.org/c/qt/qtsvg/+/730590	patch
https://codereview.qt-project.org/c/qt/qtsvg/+/743488	patch
https://codereview.qt-project.org/c/qt/qtsvg/+/748966	patch
https://codereview.qt-project.org/c/qt/qtsvg/+/756512	patch

Impacted products

1 product

Vendor	Product	Version	CPE status
qt	qt	Affected: 4.1.0 , < 6.8.9 (python) Affected: 6.9.0 , < 6.11.2 (python) Unknown: 0 , < 4.1.0 (python) cpe:2.3:a:qt:qt:::::::: cpe:2.3:a:qt:qtsvg::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-8168",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-19T14:27:04.849301Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-19T14:27:15.747Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*",
            "cpe:2.3:a:qt:qtsvg:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "modules": [
            "qtsvg"
          ],
          "product": "qt",
          "vendor": "qt",
          "versions": [
            {
              "lessThan": "6.8.9",
              "status": "affected",
              "version": "4.1.0",
              "versionType": "python"
            },
            {
              "lessThan": "6.11.2",
              "status": "affected",
              "version": "6.9.0",
              "versionType": "python"
            },
            {
              "lessThan": "4.1.0",
              "status": "unknown",
              "version": "0",
              "versionType": "python"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.8.9",
                  "versionStartIncluding": "4.1.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.11.2",
                  "versionStartIncluding": "6.9.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:qt:qtsvg:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.8.9",
                  "versionStartIncluding": "4.1.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:qt:qtsvg:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.11.2",
                  "versionStartIncluding": "6.9.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eUncontrolled recursion in the SVG parser and renderer of the Qt SVG module (\u003ccode\u003eQtSvg\u003c/code\u003e) in Qt Group Qt allows attackers to cause a denial of service (application crash via stack exhaustion) via a crafted SVG file with deeply nested elements.\u003c/p\u003e"
            }
          ],
          "value": "Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module (QtSvg) in Qt Group Qt allows attackers to cause a denial of service (application crash via stack exhaustion) via a crafted SVG file with deeply nested elements."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-230",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-230 Serialized Data with Nested Payloads"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-674",
              "description": "CWE-674 Uncontrolled Recursion",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T13:08:14.544Z",
        "orgId": "a59d8014-47c4-4630-ab43-e1b13cbe58e3",
        "shortName": "Qt"
      },
      "references": [
        {
          "name": "Propagate QSvgExtraStates variables to pattern and mask elements",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-8168:"
        },
        {
          "name": "Fix rendering causing stack overflow",
          "tags": [
            "patch"
          ],
          "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/730591"
        },
        {
          "name": "Fix resolving paint servers going through stack overflow",
          "tags": [
            "patch"
          ],
          "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/730501"
        },
        {
          "name": "Fix stack overflow caused by recursive calls of destructors",
          "tags": [
            "patch"
          ],
          "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/731257"
        },
        {
          "name": "Add a test for deeply nested SVG files",
          "tags": [
            "patch"
          ],
          "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/730892"
        },
        {
          "name": "Add baseline test for deeply nested elements",
          "tags": [
            "patch"
          ],
          "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/733245"
        },
        {
          "name": "Speed up QSvgStructureNode::releaseDescendants()",
          "tags": [
            "patch"
          ],
          "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/738811"
        },
        {
          "name": "Fix stack overflow in detectCycles",
          "tags": [
            "patch"
          ],
          "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/730590"
        },
        {
          "name": "Use bottom tested loop in detectCycles()",
          "tags": [
            "patch"
          ],
          "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/743488"
        },
        {
          "name": "Apply and revert styles iteratively",
          "tags": [
            "patch"
          ],
          "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/748966"
        },
        {
          "name": "Propagate QSvgExtraStates variables to pattern and mask elements",
          "tags": [
            "patch"
          ],
          "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/756512"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Denial-of-service vulnerability in the SVG parser and renderer impacts Qt",
      "x_generator": {
        "engine": "Claude AI (Opus 5.5) \u2014 draft only, requires human validation before submission"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a59d8014-47c4-4630-ab43-e1b13cbe58e3",
    "assignerShortName": "Qt",
    "cveId": "CVE-2026-8168",
    "datePublished": "2026-10-19T13:08:14.544Z",
    "dateReserved": "2026-05-08T12:42:35.026Z",
    "dateUpdated": "2026-10-19T14:27:15.747Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-8168",
      "date": "2026-10-21",
      "epss": "0.00404",
      "percentile": "0.33508"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "cpes": [
                  "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*",
                  "cpe:2.3:a:qt:qtsvg:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "modules": [
                  "qtsvg"
                ],
                "product": "qt",
                "vendor": "qt",
                "versions": [
                  {
                    "lessThan": "6.8.9",
                    "status": "affected",
                    "version": "4.1.0",
                    "versionType": "python"
                  },
                  {
                    "lessThan": "6.11.2",
                    "status": "affected",
                    "version": "6.9.0",
                    "versionType": "python"
                  },
                  {
                    "lessThan": "4.1.0",
                    "status": "unknown",
                    "version": "0",
                    "versionType": "python"
                  }
                ]
              }
            ],
            "source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module (QtSvg) in Qt Group Qt allows attackers to cause a denial of service (application crash via stack exhaustion) via a crafted SVG file with deeply nested elements."
          }
        ],
        "id": "CVE-2026-8168",
        "lastModified": "2026-10-19T21:13:39.973",
        "metrics": {
          "cvssMetricV40": [
            {
              "cvssData": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "NETWORK",
                "availabilityRequirement": "NOT_DEFINED",
                "baseScore": 7.1,
                "baseSeverity": "HIGH",
                "confidentialityRequirement": "NOT_DEFINED",
                "exploitMaturity": "NOT_DEFINED",
                "integrityRequirement": "NOT_DEFINED",
                "modifiedAttackComplexity": "NOT_DEFINED",
                "modifiedAttackRequirements": "NOT_DEFINED",
                "modifiedAttackVector": "NOT_DEFINED",
                "modifiedPrivilegesRequired": "NOT_DEFINED",
                "modifiedSubAvailabilityImpact": "NOT_DEFINED",
                "modifiedSubConfidentialityImpact": "NOT_DEFINED",
                "modifiedSubIntegrityImpact": "NOT_DEFINED",
                "modifiedUserInteraction": "NOT_DEFINED",
                "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
                "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
                "modifiedVulnIntegrityImpact": "NOT_DEFINED",
                "privilegesRequired": "NONE",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "PASSIVE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
                "version": "4.0",
                "vulnAvailabilityImpact": "HIGH",
                "vulnConfidentialityImpact": "NONE",
                "vulnIntegrityImpact": "NONE",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2026-8168",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-19T14:27:04.849301Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2026-10-19T14:17:08.840",
        "references": [
          {
            "source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3",
            "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/730501"
          },
          {
            "source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3",
            "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/730590"
          },
          {
            "source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3",
            "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/730591"
          },
          {
            "source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3",
            "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/730892"
          },
          {
            "source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3",
            "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/731257"
          },
          {
            "source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3",
            "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/733245"
          },
          {
            "source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3",
            "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/738811"
          },
          {
            "source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3",
            "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/743488"
          },
          {
            "source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3",
            "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/748966"
          },
          {
            "source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3",
            "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/756512"
          },
          {
            "source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3",
            "url": "https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-8168:"
          }
        ],
        "sourceIdentifier": "a59d8014-47c4-4630-ab43-e1b13cbe58e3",
        "vulnStatus": "Awaiting Analysis",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-674"
              }
            ],
            "source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3",
            "type": "Secondary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-10-20T12:55:10+00:00",
      "cve": "CVE-2026-8168",
      "id": "CVE-2026-8168",
      "initial_release_date": "2026-10-19T13:08:14.544000+00:00",
      "product_status:fixed": "17",
      "product_status:known_affected": "17",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "qt5-qtsvg: qt6-qtsvg: qt: Denial of Service via deeply nested SVG elements",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8168.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-8168",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-10-19T14:27:04.849301Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-10-19T14:27:11.146Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "cpes": [
                "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*",
                "cpe:2.3:a:qt:qtsvg:*:*:*:*:*:*:*:*"
              ],
              "defaultStatus": "unaffected",
              "modules": [
                "qtsvg"
              ],
              "product": "qt",
              "vendor": "qt",
              "versions": [
                {
                  "lessThan": "6.8.9",
                  "status": "affected",
                  "version": "4.1.0",
                  "versionType": "python"
                },
                {
                  "lessThan": "6.11.2",
                  "status": "affected",
                  "version": "6.9.0",
                  "versionType": "python"
                },
                {
                  "lessThan": "4.1.0",
                  "status": "unknown",
                  "version": "0",
                  "versionType": "python"
                }
              ]
            }
          ],
          "cpeApplicability": [
            {
              "nodes": [
                {
                  "cpeMatch": [
                    {
                      "criteria": "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*",
                      "versionEndExcluding": "6.8.9",
                      "versionStartIncluding": "4.1.0",
                      "vulnerable": true
                    },
                    {
                      "criteria": "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*",
                      "versionEndExcluding": "6.11.2",
                      "versionStartIncluding": "6.9.0",
                      "vulnerable": true
                    },
                    {
                      "criteria": "cpe:2.3:a:qt:qtsvg:*:*:*:*:*:*:*:*",
                      "versionEndExcluding": "6.8.9",
                      "versionStartIncluding": "4.1.0",
                      "vulnerable": true
                    },
                    {
                      "criteria": "cpe:2.3:a:qt:qtsvg:*:*:*:*:*:*:*:*",
                      "versionEndExcluding": "6.11.2",
                      "versionStartIncluding": "6.9.0",
                      "vulnerable": true
                    }
                  ],
                  "negate": false,
                  "operator": "OR"
                }
              ],
              "operator": "OR"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eUncontrolled recursion in the SVG parser and renderer of the Qt SVG module (\u003ccode\u003eQtSvg\u003c/code\u003e) in Qt Group Qt allows attackers to cause a denial of service (application crash via stack exhaustion) via a crafted SVG file with deeply nested elements.\u003c/p\u003e"
                }
              ],
              "value": "Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module (QtSvg) in Qt Group Qt allows attackers to cause a denial of service (application crash via stack exhaustion) via a crafted SVG file with deeply nested elements."
            }
          ],
          "impacts": [
            {
              "capecId": "CAPEC-230",
              "descriptions": [
                {
                  "lang": "en",
                  "value": "CAPEC-230 Serialized Data with Nested Payloads"
                }
              ]
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "NETWORK",
                "baseScore": 7.1,
                "baseSeverity": "HIGH",
                "exploitMaturity": "NOT_DEFINED",
                "privilegesRequired": "NONE",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "PASSIVE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "HIGH",
                "vulnConfidentialityImpact": "NONE",
                "vulnIntegrityImpact": "NONE",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-674",
                  "description": "CWE-674 Uncontrolled Recursion",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-10-19T13:08:14.544Z",
            "orgId": "a59d8014-47c4-4630-ab43-e1b13cbe58e3",
            "shortName": "Qt"
          },
          "references": [
            {
              "name": "Propagate QSvgExtraStates variables to pattern and mask elements",
              "tags": [
                "vendor-advisory"
              ],
              "url": "https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-8168:"
            },
            {
              "name": "Fix rendering causing stack overflow",
              "tags": [
                "patch"
              ],
              "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/730591"
            },
            {
              "name": "Fix resolving paint servers going through stack overflow",
              "tags": [
                "patch"
              ],
              "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/730501"
            },
            {
              "name": "Fix stack overflow caused by recursive calls of destructors",
              "tags": [
                "patch"
              ],
              "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/731257"
            },
            {
              "name": "Add a test for deeply nested SVG files",
              "tags": [
                "patch"
              ],
              "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/730892"
            },
            {
              "name": "Add baseline test for deeply nested elements",
              "tags": [
                "patch"
              ],
              "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/733245"
            },
            {
              "name": "Speed up QSvgStructureNode::releaseDescendants()",
              "tags": [
                "patch"
              ],
              "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/738811"
            },
            {
              "name": "Fix stack overflow in detectCycles",
              "tags": [
                "patch"
              ],
              "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/730590"
            },
            {
              "name": "Use bottom tested loop in detectCycles()",
              "tags": [
                "patch"
              ],
              "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/743488"
            },
            {
              "name": "Apply and revert styles iteratively",
              "tags": [
                "patch"
              ],
              "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/748966"
            },
            {
              "name": "Propagate QSvgExtraStates variables to pattern and mask elements",
              "tags": [
                "patch"
              ],
              "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/756512"
            }
          ],
          "source": {
            "discovery": "EXTERNAL"
          },
          "title": "Denial-of-service vulnerability in the SVG parser and renderer impacts Qt",
          "x_generator": {
            "engine": "Claude AI (Opus 5.5) \u2014 draft only, requires human validation before submission"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "a59d8014-47c4-4630-ab43-e1b13cbe58e3",
        "assignerShortName": "Qt",
        "cveId": "CVE-2026-8168",
        "datePublished": "2026-10-19T13:08:14.544Z",
        "dateReserved": "2026-05-08T12:42:35.026Z",
        "dateUpdated": "2026-10-19T14:27:15.747Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

FKIE_CVE-2026-8168

Vulnerability from fkie_nvd - Published: 2026-10-19 14:17 - Updated: 2026-10-19 21:13

Severity

7.1 (High) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Summary

References

	URL	Tags
	a59d8014-47c4-4630-ab43-e1b13cbe58e3	https://codereview.qt-project.org/c/qt/qtsvg/+/730501
	a59d8014-47c4-4630-ab43-e1b13cbe58e3	https://codereview.qt-project.org/c/qt/qtsvg/+/730590
	a59d8014-47c4-4630-ab43-e1b13cbe58e3	https://codereview.qt-project.org/c/qt/qtsvg/+/730591
	a59d8014-47c4-4630-ab43-e1b13cbe58e3	https://codereview.qt-project.org/c/qt/qtsvg/+/730892
	a59d8014-47c4-4630-ab43-e1b13cbe58e3	https://codereview.qt-project.org/c/qt/qtsvg/+/731257
	a59d8014-47c4-4630-ab43-e1b13cbe58e3	https://codereview.qt-project.org/c/qt/qtsvg/+/733245
	a59d8014-47c4-4630-ab43-e1b13cbe58e3	https://codereview.qt-project.org/c/qt/qtsvg/+/738811
	a59d8014-47c4-4630-ab43-e1b13cbe58e3	https://codereview.qt-project.org/c/qt/qtsvg/+/743488
	a59d8014-47c4-4630-ab43-e1b13cbe58e3	https://codereview.qt-project.org/c/qt/qtsvg/+/748966
	a59d8014-47c4-4630-ab43-e1b13cbe58e3	https://codereview.qt-project.org/c/qt/qtsvg/+/756512
	a59d8014-47c4-4630-ab43-e1b13cbe58e3	https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-8168:

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*",
            "cpe:2.3:a:qt:qtsvg:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "modules": [
            "qtsvg"
          ],
          "product": "qt",
          "vendor": "qt",
          "versions": [
            {
              "lessThan": "6.8.9",
              "status": "affected",
              "version": "4.1.0",
              "versionType": "python"
            },
            {
              "lessThan": "6.11.2",
              "status": "affected",
              "version": "6.9.0",
              "versionType": "python"
            },
            {
              "lessThan": "4.1.0",
              "status": "unknown",
              "version": "0",
              "versionType": "python"
            }
          ]
        }
      ],
      "source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module (QtSvg) in Qt Group Qt allows attackers to cause a denial of service (application crash via stack exhaustion) via a crafted SVG file with deeply nested elements."
    }
  ],
  "id": "CVE-2026-8168",
  "lastModified": "2026-10-19T21:13:39.973",
  "metrics": {
    "cvssMetricV40": [
      {
        "cvssData": {
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "attackVector": "NETWORK",
          "availabilityRequirement": "NOT_DEFINED",
          "baseScore": 7.1,
          "baseSeverity": "HIGH",
          "confidentialityRequirement": "NOT_DEFINED",
          "exploitMaturity": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "privilegesRequired": "NONE",
          "providerUrgency": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "userInteraction": "PASSIVE",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "version": "4.0",
          "vulnAvailabilityImpact": "HIGH",
          "vulnConfidentialityImpact": "NONE",
          "vulnIntegrityImpact": "NONE",
          "vulnerabilityResponseEffort": "NOT_DEFINED"
        },
        "source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-8168",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-10-19T14:27:04.849301Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-10-19T14:17:08.840",
  "references": [
    {
      "source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3",
      "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/730501"
    },
    {
      "source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3",
      "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/730590"
    },
    {
      "source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3",
      "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/730591"
    },
    {
      "source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3",
      "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/730892"
    },
    {
      "source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3",
      "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/731257"
    },
    {
      "source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3",
      "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/733245"
    },
    {
      "source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3",
      "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/738811"
    },
    {
      "source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3",
      "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/743488"
    },
    {
      "source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3",
      "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/748966"
    },
    {
      "source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3",
      "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/756512"
    },
    {
      "source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3",
      "url": "https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-8168:"
    }
  ],
  "sourceIdentifier": "a59d8014-47c4-4630-ab43-e1b13cbe58e3",
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-674"
        }
      ],
      "source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3",
      "type": "Secondary"
    }
  ]
}

GHSA-4F98-277J-6QVJ

Vulnerability from github – Published: 2026-10-19 15:32 – Updated: 2026-10-19 15:32

Details

Severity

7.1 (High)


                  
                    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-8168"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-674"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-10-19T14:17:08Z",
    "severity": "HIGH"
  },
  "details": "Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module (QtSvg) in Qt Group Qt allows attackers to cause a denial of service (application crash via stack exhaustion) via a crafted SVG file with deeply nested elements.",
  "id": "GHSA-4f98-277j-6qvj",
  "modified": "2026-10-19T15:32:42Z",
  "published": "2026-10-19T15:32:42Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-8168"
    },
    {
      "type": "WEB",
      "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/730501"
    },
    {
      "type": "WEB",
      "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/730590"
    },
    {
      "type": "WEB",
      "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/730591"
    },
    {
      "type": "WEB",
      "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/730892"
    },
    {
      "type": "WEB",
      "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/731257"
    },
    {
      "type": "WEB",
      "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/733245"
    },
    {
      "type": "WEB",
      "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/738811"
    },
    {
      "type": "WEB",
      "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/743488"
    },
    {
      "type": "WEB",
      "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/748966"
    },
    {
      "type": "WEB",
      "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/756512"
    },
    {
      "type": "WEB",
      "url": "https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-8168:"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
      "type": "CVSS_V4"
    }
  ]
}

RHSA-2026:58460

Vulnerability from csaf_redhat - Published: 2026-08-21 19:56 - Updated: 2026-10-20 13:12

Summary

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Severity

Moderate

Scope

2 vulnerabilities in this advisory, including CVE-2026-8168.

CVE-2026-8168

A flaw was found in the Qt SVG module. A remote attacker could trigger this issue by providing a specially crafted SVG (Scalable Vector Graphics) file containing deeply nested elements. When parsed, this leads to uncontrolled recursion and stack exhaustion, resulting in an application crash and a Denial of Service (DoS).

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Fixed: 7 products

https://access.redhat.com/errata/RHSA-2026:58460

Open the full advisory

RHSA-2026:80569

Vulnerability from csaf_redhat - Published: 2026-10-12 04:01 - Updated: 2026-10-20 12:55

Summary

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Severity

Moderate

Scope

1 vulnerability in this advisory, including CVE-2026-8168.

CVE-2026-8168

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Fixed: 10 products

https://access.redhat.com/errata/RHSA-2026:80569

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2026-8168 (GCVE-0-2026-8168)

FKIE_CVE-2026-8168

GHSA-4F98-277J-6QVJ

RHSA-2026:58460

RHSA-2026:80569

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour