SVG Rendering Vulnerability in Qt SVG Module
CVE-2025-10728

9.4CRITICAL

Key Information:

Vendor

The Qt Company

Status
Qt
Vendor
CVE Published:
3 October 2025

What is CVE-2025-10728?

A vulnerability exists in the Qt SVG module, where rendering a specially crafted SVG file containing a element may lead to recursive rendering. This can result in a stack overflow, effectively causing a Denial of Service condition. Developers should ensure their applications handle SVG content safely to mitigate potential risks associated with this flaw.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Qt 6.7.0 <= 6.8.4

Qt 6.9.0 <= 6.9.2

References

https://codereview.qt-project.org/c/qt/qtsvg/+/654200

CVSS V4

Score:
9.4
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

OSS-Fuzz
JSON
.