Vulnerability-Lookup

RHSA-2026:58460

Vulnerability from csaf_redhat - Published: 2026-08-21 19:56 - Updated: 2026-10-20 13:12

Summary

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Severity

Moderate

Notes

Topic: An update for Red Hat Hardened Images RPMs is now available.

Details: This update includes the following RPMs: qt6-qtsvg: * qt6-qtsvg-6.11.2-1.hum1 (aarch64, x86_64) * qt6-qtsvg-devel-6.11.2-1.hum1 (aarch64, x86_64) * qt6-qtsvg-examples-6.11.2-1.hum1 (aarch64, x86_64) * qt6-qtsvg-6.11.2-1.hum1.src (src)

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2025-10728

A stack overflow flaw has been discovered in the Qt SVG module. When the module renders a Svg file that contains a <pattern> element, it might end up rendering it recursively leading to stack overflow DoS

4.0 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-674 - Uncontrolled Recursion

Affected products

Fixed 7 products

Product	Version	Remediation
Unresolved product id: Red Hat Hardened Images:qt6-qtsvg-0:6.11.2-1.hum1@aarch64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:qt6-qtsvg-0:6.11.2-1.hum1@src	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:qt6-qtsvg-0:6.11.2-1.hum1@x86_64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:qt6-qtsvg-devel-0:6.11.2-1.hum1@aarch64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:qt6-qtsvg-devel-0:6.11.2-1.hum1@x86_64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:qt6-qtsvg-examples-0:6.11.2-1.hum1@aarch64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:qt6-qtsvg-examples-0:6.11.2-1.hum1@x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2026-8168

A flaw was found in the Qt SVG module. A remote attacker could trigger this issue by providing a specially crafted SVG (Scalable Vector Graphics) file containing deeply nested elements. When parsed, this leads to uncontrolled recursion and stack exhaustion, resulting in an application crash and a Denial of Service (DoS).

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 7 products, the same list as for CVE-2025-10728

Threats

Impact Moderate

References

26 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:58460	self
https://images.redhat.com/	external
https://access.redhat.com/security/cve/CVE-2026-8168	external
https://access.redhat.com/security/updates/classi…	external
https://access.redhat.com/security/cve/CVE-2025-10728	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2025-10728	self
https://bugzilla.redhat.com/show_bug.cgi?id=2401244	external
https://www.cve.org/CVERecord?id=CVE-2025-10728	external
https://nvd.nist.gov/vuln/detail/CVE-2025-10728	external
https://codereview.qt-project.org/c/qt/qtsvg/+/654200	external
https://access.redhat.com/security/cve/CVE-2026-8168	self
https://bugzilla.redhat.com/show_bug.cgi?id=2555573	external
https://www.cve.org/CVERecord?id=CVE-2026-8168	external
https://nvd.nist.gov/vuln/detail/CVE-2026-8168	external
https://codereview.qt-project.org/c/qt/qtsvg/+/730501	external
https://codereview.qt-project.org/c/qt/qtsvg/+/730590	external
https://codereview.qt-project.org/c/qt/qtsvg/+/730591	external
https://codereview.qt-project.org/c/qt/qtsvg/+/730892	external
https://codereview.qt-project.org/c/qt/qtsvg/+/731257	external
https://codereview.qt-project.org/c/qt/qtsvg/+/733245	external
https://codereview.qt-project.org/c/qt/qtsvg/+/738811	external
https://codereview.qt-project.org/c/qt/qtsvg/+/743488	external
https://codereview.qt-project.org/c/qt/qtsvg/+/748966	external
https://codereview.qt-project.org/c/qt/qtsvg/+/756512	external
https://wiki.qt.io/List_of_known_vulnerabilities_…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for Red Hat Hardened Images RPMs is now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This update includes the following RPMs:\n\nqt6-qtsvg:\n  * qt6-qtsvg-6.11.2-1.hum1 (aarch64, x86_64)\n  * qt6-qtsvg-devel-6.11.2-1.hum1 (aarch64, x86_64)\n  * qt6-qtsvg-examples-6.11.2-1.hum1 (aarch64, x86_64)\n  * qt6-qtsvg-6.11.2-1.hum1.src (src)",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:58460",
        "url": "https://access.redhat.com/errata/RHSA-2026:58460"
      },
      {
        "category": "external",
        "summary": "https://images.redhat.com/",
        "url": "https://images.redhat.com/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-8168",
        "url": "https://access.redhat.com/security/cve/CVE-2026-8168"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-10728",
        "url": "https://access.redhat.com/security/cve/CVE-2025-10728"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_58460.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
    "tracking": {
      "current_release_date": "2026-10-20T13:12:00+00:00",
      "generator": {
        "date": "2026-10-20T13:12:00+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.2"
        }
      },
      "id": "RHSA-2026:58460",
      "initial_release_date": "2026-08-21T19:56:38+00:00",
      "revision_history": [
        {
          "date": "2026-08-21T19:56:38+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-10-20T11:38:14+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-10-20T13:12:00+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Hardened Images",
                "product": {
                  "name": "Red Hat Hardened Images",
                  "product_id": "Red Hat Hardened Images",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:hummingbird:1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Hardened Images"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "qt6-qtsvg-0:6.11.2-1.hum1@aarch64",
                "product": {
                  "name": "qt6-qtsvg-0:6.11.2-1.hum1@aarch64",
                  "product_id": "qt6-qtsvg-0:6.11.2-1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/qt6-qtsvg@6.11.2-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "qt6-qtsvg-devel-0:6.11.2-1.hum1@aarch64",
                "product": {
                  "name": "qt6-qtsvg-devel-0:6.11.2-1.hum1@aarch64",
                  "product_id": "qt6-qtsvg-devel-0:6.11.2-1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/qt6-qtsvg-devel@6.11.2-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "qt6-qtsvg-examples-0:6.11.2-1.hum1@aarch64",
                "product": {
                  "name": "qt6-qtsvg-examples-0:6.11.2-1.hum1@aarch64",
                  "product_id": "qt6-qtsvg-examples-0:6.11.2-1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/qt6-qtsvg-examples@6.11.2-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "qt6-qtsvg-0:6.11.2-1.hum1@src",
                "product": {
                  "name": "qt6-qtsvg-0:6.11.2-1.hum1@src",
                  "product_id": "qt6-qtsvg-0:6.11.2-1.hum1@src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/qt6-qtsvg@6.11.2-1.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "qt6-qtsvg-0:6.11.2-1.hum1@x86_64",
                "product": {
                  "name": "qt6-qtsvg-0:6.11.2-1.hum1@x86_64",
                  "product_id": "qt6-qtsvg-0:6.11.2-1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/qt6-qtsvg@6.11.2-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "qt6-qtsvg-devel-0:6.11.2-1.hum1@x86_64",
                "product": {
                  "name": "qt6-qtsvg-devel-0:6.11.2-1.hum1@x86_64",
                  "product_id": "qt6-qtsvg-devel-0:6.11.2-1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/qt6-qtsvg-devel@6.11.2-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "qt6-qtsvg-examples-0:6.11.2-1.hum1@x86_64",
                "product": {
                  "name": "qt6-qtsvg-examples-0:6.11.2-1.hum1@x86_64",
                  "product_id": "qt6-qtsvg-examples-0:6.11.2-1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/qt6-qtsvg-examples@6.11.2-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qt6-qtsvg-0:6.11.2-1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:qt6-qtsvg-0:6.11.2-1.hum1@aarch64"
        },
        "product_reference": "qt6-qtsvg-0:6.11.2-1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qt6-qtsvg-0:6.11.2-1.hum1@src as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:qt6-qtsvg-0:6.11.2-1.hum1@src"
        },
        "product_reference": "qt6-qtsvg-0:6.11.2-1.hum1@src",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qt6-qtsvg-0:6.11.2-1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:qt6-qtsvg-0:6.11.2-1.hum1@x86_64"
        },
        "product_reference": "qt6-qtsvg-0:6.11.2-1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qt6-qtsvg-devel-0:6.11.2-1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:qt6-qtsvg-devel-0:6.11.2-1.hum1@aarch64"
        },
        "product_reference": "qt6-qtsvg-devel-0:6.11.2-1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qt6-qtsvg-devel-0:6.11.2-1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:qt6-qtsvg-devel-0:6.11.2-1.hum1@x86_64"
        },
        "product_reference": "qt6-qtsvg-devel-0:6.11.2-1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qt6-qtsvg-examples-0:6.11.2-1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:qt6-qtsvg-examples-0:6.11.2-1.hum1@aarch64"
        },
        "product_reference": "qt6-qtsvg-examples-0:6.11.2-1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qt6-qtsvg-examples-0:6.11.2-1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:qt6-qtsvg-examples-0:6.11.2-1.hum1@x86_64"
        },
        "product_reference": "qt6-qtsvg-examples-0:6.11.2-1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-10728",
      "cwe": {
        "id": "CWE-674",
        "name": "Uncontrolled Recursion"
      },
      "discovery_date": "2025-10-03T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2401244"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A stack overflow flaw has been discovered in the Qt SVG module. When the module renders a Svg file that contains a \u003cpattern\u003e element, it might end up rendering it recursively leading to stack overflow DoS",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "qt6-qtsvg: qt5-qtsvg: Uncontrolled recursion in Qt SVG module",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The only discussed impact is to program availability. It is unclear why the upstream advisory indicates confidentiality and integrity impact.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:qt6-qtsvg-0:6.11.2-1.hum1@aarch64",
          "Red Hat Hardened Images:qt6-qtsvg-0:6.11.2-1.hum1@src",
          "Red Hat Hardened Images:qt6-qtsvg-0:6.11.2-1.hum1@x86_64",
          "Red Hat Hardened Images:qt6-qtsvg-devel-0:6.11.2-1.hum1@aarch64",
          "Red Hat Hardened Images:qt6-qtsvg-devel-0:6.11.2-1.hum1@x86_64",
          "Red Hat Hardened Images:qt6-qtsvg-examples-0:6.11.2-1.hum1@aarch64",
          "Red Hat Hardened Images:qt6-qtsvg-examples-0:6.11.2-1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-10728"
        },
        {
          "category": "external",
          "summary": "RHBZ#2401244",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2401244"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-10728",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-10728"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-10728",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-10728"
        },
        {
          "category": "external",
          "summary": "https://codereview.qt-project.org/c/qt/qtsvg/+/654200",
          "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/654200"
        }
      ],
      "release_date": "2025-10-03T14:35:02.539000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-21T19:56:38+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:qt6-qtsvg-0:6.11.2-1.hum1@aarch64",
            "Red Hat Hardened Images:qt6-qtsvg-0:6.11.2-1.hum1@src",
            "Red Hat Hardened Images:qt6-qtsvg-0:6.11.2-1.hum1@x86_64",
            "Red Hat Hardened Images:qt6-qtsvg-devel-0:6.11.2-1.hum1@aarch64",
            "Red Hat Hardened Images:qt6-qtsvg-devel-0:6.11.2-1.hum1@x86_64",
            "Red Hat Hardened Images:qt6-qtsvg-examples-0:6.11.2-1.hum1@aarch64",
            "Red Hat Hardened Images:qt6-qtsvg-examples-0:6.11.2-1.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:58460"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Hardened Images:qt6-qtsvg-0:6.11.2-1.hum1@aarch64",
            "Red Hat Hardened Images:qt6-qtsvg-0:6.11.2-1.hum1@src",
            "Red Hat Hardened Images:qt6-qtsvg-0:6.11.2-1.hum1@x86_64",
            "Red Hat Hardened Images:qt6-qtsvg-devel-0:6.11.2-1.hum1@aarch64",
            "Red Hat Hardened Images:qt6-qtsvg-devel-0:6.11.2-1.hum1@x86_64",
            "Red Hat Hardened Images:qt6-qtsvg-examples-0:6.11.2-1.hum1@aarch64",
            "Red Hat Hardened Images:qt6-qtsvg-examples-0:6.11.2-1.hum1@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 4.0,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:qt6-qtsvg-0:6.11.2-1.hum1@aarch64",
            "Red Hat Hardened Images:qt6-qtsvg-0:6.11.2-1.hum1@src",
            "Red Hat Hardened Images:qt6-qtsvg-0:6.11.2-1.hum1@x86_64",
            "Red Hat Hardened Images:qt6-qtsvg-devel-0:6.11.2-1.hum1@aarch64",
            "Red Hat Hardened Images:qt6-qtsvg-devel-0:6.11.2-1.hum1@x86_64",
            "Red Hat Hardened Images:qt6-qtsvg-examples-0:6.11.2-1.hum1@aarch64",
            "Red Hat Hardened Images:qt6-qtsvg-examples-0:6.11.2-1.hum1@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "qt6-qtsvg: qt5-qtsvg: Uncontrolled recursion in Qt SVG module"
    },
    {
      "cve": "CVE-2026-8168",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-10-19T13:32:29.089000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2555573"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Qt SVG module. A remote attacker could trigger this issue by providing a specially crafted SVG (Scalable Vector Graphics) file containing deeply nested elements. When parsed, this leads to uncontrolled recursion and stack exhaustion, resulting in an application crash and a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "qt5-qtsvg: qt6-qtsvg: qt: Denial of Service via deeply nested SVG elements",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:qt6-qtsvg-0:6.11.2-1.hum1@aarch64",
          "Red Hat Hardened Images:qt6-qtsvg-0:6.11.2-1.hum1@src",
          "Red Hat Hardened Images:qt6-qtsvg-0:6.11.2-1.hum1@x86_64",
          "Red Hat Hardened Images:qt6-qtsvg-devel-0:6.11.2-1.hum1@aarch64",
          "Red Hat Hardened Images:qt6-qtsvg-devel-0:6.11.2-1.hum1@x86_64",
          "Red Hat Hardened Images:qt6-qtsvg-examples-0:6.11.2-1.hum1@aarch64",
          "Red Hat Hardened Images:qt6-qtsvg-examples-0:6.11.2-1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-8168"
        },
        {
          "category": "external",
          "summary": "RHBZ#2555573",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2555573"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-8168",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-8168"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-8168",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-8168"
        },
        {
          "category": "external",
          "summary": "https://codereview.qt-project.org/c/qt/qtsvg/+/730501",
          "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/730501"
        },
        {
          "category": "external",
          "summary": "https://codereview.qt-project.org/c/qt/qtsvg/+/730590",
          "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/730590"
        },
        {
          "category": "external",
          "summary": "https://codereview.qt-project.org/c/qt/qtsvg/+/730591",
          "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/730591"
        },
        {
          "category": "external",
          "summary": "https://codereview.qt-project.org/c/qt/qtsvg/+/730892",
          "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/730892"
        },
        {
          "category": "external",
          "summary": "https://codereview.qt-project.org/c/qt/qtsvg/+/731257",
          "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/731257"
        },
        {
          "category": "external",
          "summary": "https://codereview.qt-project.org/c/qt/qtsvg/+/733245",
          "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/733245"
        },
        {
          "category": "external",
          "summary": "https://codereview.qt-project.org/c/qt/qtsvg/+/738811",
          "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/738811"
        },
        {
          "category": "external",
          "summary": "https://codereview.qt-project.org/c/qt/qtsvg/+/743488",
          "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/743488"
        },
        {
          "category": "external",
          "summary": "https://codereview.qt-project.org/c/qt/qtsvg/+/748966",
          "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/748966"
        },
        {
          "category": "external",
          "summary": "https://codereview.qt-project.org/c/qt/qtsvg/+/756512",
          "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/756512"
        },
        {
          "category": "external",
          "summary": "https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-8168:",
          "url": "https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-8168:"
        }
      ],
      "release_date": "2026-10-19T13:08:14.544000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-21T19:56:38+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:qt6-qtsvg-0:6.11.2-1.hum1@aarch64",
            "Red Hat Hardened Images:qt6-qtsvg-0:6.11.2-1.hum1@src",
            "Red Hat Hardened Images:qt6-qtsvg-0:6.11.2-1.hum1@x86_64",
            "Red Hat Hardened Images:qt6-qtsvg-devel-0:6.11.2-1.hum1@aarch64",
            "Red Hat Hardened Images:qt6-qtsvg-devel-0:6.11.2-1.hum1@x86_64",
            "Red Hat Hardened Images:qt6-qtsvg-examples-0:6.11.2-1.hum1@aarch64",
            "Red Hat Hardened Images:qt6-qtsvg-examples-0:6.11.2-1.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:58460"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Hardened Images:qt6-qtsvg-0:6.11.2-1.hum1@aarch64",
            "Red Hat Hardened Images:qt6-qtsvg-0:6.11.2-1.hum1@src",
            "Red Hat Hardened Images:qt6-qtsvg-0:6.11.2-1.hum1@x86_64",
            "Red Hat Hardened Images:qt6-qtsvg-devel-0:6.11.2-1.hum1@aarch64",
            "Red Hat Hardened Images:qt6-qtsvg-devel-0:6.11.2-1.hum1@x86_64",
            "Red Hat Hardened Images:qt6-qtsvg-examples-0:6.11.2-1.hum1@aarch64",
            "Red Hat Hardened Images:qt6-qtsvg-examples-0:6.11.2-1.hum1@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:qt6-qtsvg-0:6.11.2-1.hum1@aarch64",
            "Red Hat Hardened Images:qt6-qtsvg-0:6.11.2-1.hum1@src",
            "Red Hat Hardened Images:qt6-qtsvg-0:6.11.2-1.hum1@x86_64",
            "Red Hat Hardened Images:qt6-qtsvg-devel-0:6.11.2-1.hum1@aarch64",
            "Red Hat Hardened Images:qt6-qtsvg-devel-0:6.11.2-1.hum1@x86_64",
            "Red Hat Hardened Images:qt6-qtsvg-examples-0:6.11.2-1.hum1@aarch64",
            "Red Hat Hardened Images:qt6-qtsvg-examples-0:6.11.2-1.hum1@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "qt5-qtsvg: qt6-qtsvg: qt: Denial of Service via deeply nested SVG elements"
    }
  ]
}

CVE-2025-10728 (GCVE-0-2025-10728)

Vulnerability from cvelistv5 – Published: 2025-10-03 14:35 – Updated: 2026-07-29 08:57

Title

Uncontrolled recursion in Qt SVG module

Summary

When the module renders a Svg file that contains a <pattern> element, it might end up rendering it recursively leading to stack overflow DoS

Severity

9.4 (Critical)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:P/RE:H/U:Red

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-10-03 14:43 UTC

CWE

CWE-674 - Uncontrolled Recursion

Assigner

TQtC CNA

CNA scorecard – unranked: 7 records in the last 180 days, 10 needed details

References

1 reference

URL	Tags
https://codereview.qt-project.org/c/qt/qtsvg/+/654200

Impacted products

1 product

Vendor	Product	Version
Qt	Qt	Affected: 6.7.0 , ≤ 6.8.4 (python) Affected: 6.9.0 , ≤ 6.9.2 (python) cpe:2.3:a:qt:qt:::::::: cpe:2.3:a:qt:qt::::::::

Date Public

2025-10-03 14:34

Credits

OSS-Fuzz Oddmund Skogen

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-10728",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-10-03T14:43:30.229164Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-03T14:43:41.418Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "modules": [
            "Qt SVG"
          ],
          "product": "Qt",
          "vendor": "Qt",
          "versions": [
            {
              "lessThanOrEqual": "6.8.4",
              "status": "affected",
              "version": "6.7.0",
              "versionType": "python"
            },
            {
              "lessThanOrEqual": "6.9.2",
              "status": "affected",
              "version": "6.9.0",
              "versionType": "python"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "6.8.4",
                  "versionStartIncluding": "6.7.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "6.9.2",
                  "versionStartIncluding": "6.9.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "OSS-Fuzz"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Oddmund Skogen"
        }
      ],
      "datePublic": "2025-10-03T14:34:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "When the module renders a Svg file that contains a \u0026lt;pattern\u0026gt; element, it might end up rendering it recursively\u0026nbsp;leading to stack overflow DoS"
            }
          ],
          "value": "When the module renders a Svg file that contains a \u003cpattern\u003e element, it might end up rendering it recursively\u00a0leading to stack overflow DoS"
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-230",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-230 Serialized Data with Nested Payloads"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "PRESENT",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 9.4,
            "baseSeverity": "CRITICAL",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "RED",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:P/RE:H/U:Red",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "HIGH"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-674",
              "description": "CWE-674 Uncontrolled Recursion",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-29T08:57:03.024Z",
        "orgId": "a59d8014-47c4-4630-ab43-e1b13cbe58e3",
        "shortName": "TQtC"
      },
      "references": [
        {
          "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/654200"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Uncontrolled recursion in Qt SVG module",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a59d8014-47c4-4630-ab43-e1b13cbe58e3",
    "assignerShortName": "TQtC",
    "cveId": "CVE-2025-10728",
    "datePublished": "2025-10-03T14:35:02.539Z",
    "dateReserved": "2025-09-19T14:01:04.716Z",
    "dateUpdated": "2026-07-29T08:57:03.024Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-8168 (GCVE-0-2026-8168)

Vulnerability from cvelistv5 – Published: 2026-10-19 13:08 – Updated: 2026-10-19 14:27

Title

Denial-of-service vulnerability in the SVG parser and renderer impacts Qt

Summary

Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module (QtSvg) in Qt Group Qt allows attackers to cause a denial of service (application crash via stack exhaustion) via a crafted SVG file with deeply nested elements.

Severity

7.1 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-19 14:27 UTC

CWE

CWE-674 - Uncontrolled Recursion

Assigner

Qt CNA under the mitre root

CNA scorecard A 91/100 over 13 records in the last 180 days details

References

11 references

URL	Tags
https://wiki.qt.io/List_of_known_vulnerabilities_…	vendor-advisory
https://codereview.qt-project.org/c/qt/qtsvg/+/730591	patch
https://codereview.qt-project.org/c/qt/qtsvg/+/730501	patch
https://codereview.qt-project.org/c/qt/qtsvg/+/731257	patch
https://codereview.qt-project.org/c/qt/qtsvg/+/730892	patch
https://codereview.qt-project.org/c/qt/qtsvg/+/733245	patch
https://codereview.qt-project.org/c/qt/qtsvg/+/738811	patch
https://codereview.qt-project.org/c/qt/qtsvg/+/730590	patch
https://codereview.qt-project.org/c/qt/qtsvg/+/743488	patch
https://codereview.qt-project.org/c/qt/qtsvg/+/748966	patch
https://codereview.qt-project.org/c/qt/qtsvg/+/756512	patch

Impacted products

1 product

Vendor	Product	Version
qt	qt	Affected: 4.1.0 , < 6.8.9 (python) Affected: 6.9.0 , < 6.11.2 (python) Unknown: 0 , < 4.1.0 (python) cpe:2.3:a:qt:qt:::::::: cpe:2.3:a:qt:qtsvg::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-8168",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-19T14:27:04.849301Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-19T14:27:15.747Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*",
            "cpe:2.3:a:qt:qtsvg:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "modules": [
            "qtsvg"
          ],
          "product": "qt",
          "vendor": "qt",
          "versions": [
            {
              "lessThan": "6.8.9",
              "status": "affected",
              "version": "4.1.0",
              "versionType": "python"
            },
            {
              "lessThan": "6.11.2",
              "status": "affected",
              "version": "6.9.0",
              "versionType": "python"
            },
            {
              "lessThan": "4.1.0",
              "status": "unknown",
              "version": "0",
              "versionType": "python"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.8.9",
                  "versionStartIncluding": "4.1.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.11.2",
                  "versionStartIncluding": "6.9.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:qt:qtsvg:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.8.9",
                  "versionStartIncluding": "4.1.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:qt:qtsvg:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.11.2",
                  "versionStartIncluding": "6.9.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eUncontrolled recursion in the SVG parser and renderer of the Qt SVG module (\u003ccode\u003eQtSvg\u003c/code\u003e) in Qt Group Qt allows attackers to cause a denial of service (application crash via stack exhaustion) via a crafted SVG file with deeply nested elements.\u003c/p\u003e"
            }
          ],
          "value": "Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module (QtSvg) in Qt Group Qt allows attackers to cause a denial of service (application crash via stack exhaustion) via a crafted SVG file with deeply nested elements."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-230",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-230 Serialized Data with Nested Payloads"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-674",
              "description": "CWE-674 Uncontrolled Recursion",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T13:08:14.544Z",
        "orgId": "a59d8014-47c4-4630-ab43-e1b13cbe58e3",
        "shortName": "Qt"
      },
      "references": [
        {
          "name": "Propagate QSvgExtraStates variables to pattern and mask elements",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-8168:"
        },
        {
          "name": "Fix rendering causing stack overflow",
          "tags": [
            "patch"
          ],
          "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/730591"
        },
        {
          "name": "Fix resolving paint servers going through stack overflow",
          "tags": [
            "patch"
          ],
          "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/730501"
        },
        {
          "name": "Fix stack overflow caused by recursive calls of destructors",
          "tags": [
            "patch"
          ],
          "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/731257"
        },
        {
          "name": "Add a test for deeply nested SVG files",
          "tags": [
            "patch"
          ],
          "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/730892"
        },
        {
          "name": "Add baseline test for deeply nested elements",
          "tags": [
            "patch"
          ],
          "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/733245"
        },
        {
          "name": "Speed up QSvgStructureNode::releaseDescendants()",
          "tags": [
            "patch"
          ],
          "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/738811"
        },
        {
          "name": "Fix stack overflow in detectCycles",
          "tags": [
            "patch"
          ],
          "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/730590"
        },
        {
          "name": "Use bottom tested loop in detectCycles()",
          "tags": [
            "patch"
          ],
          "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/743488"
        },
        {
          "name": "Apply and revert styles iteratively",
          "tags": [
            "patch"
          ],
          "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/748966"
        },
        {
          "name": "Propagate QSvgExtraStates variables to pattern and mask elements",
          "tags": [
            "patch"
          ],
          "url": "https://codereview.qt-project.org/c/qt/qtsvg/+/756512"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Denial-of-service vulnerability in the SVG parser and renderer impacts Qt",
      "x_generator": {
        "engine": "Claude AI (Opus 5.5) \u2014 draft only, requires human validation before submission"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a59d8014-47c4-4630-ab43-e1b13cbe58e3",
    "assignerShortName": "Qt",
    "cveId": "CVE-2026-8168",
    "datePublished": "2026-10-19T13:08:14.544Z",
    "dateReserved": "2026-05-08T12:42:35.026Z",
    "dateUpdated": "2026-10-19T14:27:15.747Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2026:58460

CVE-2025-10728 (GCVE-0-2025-10728)

CVE-2026-8168 (GCVE-0-2026-8168)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour