SVG Rendering Vulnerability in Qt SVG Module
CVE-2025-10728

9.4CRITICAL

Key Information:

Status
Vendor
CVE Published:
3 October 2025

What is CVE-2025-10728?

A vulnerability exists in the Qt SVG module, where rendering a specially crafted SVG file containing a element may lead to recursive rendering. This can result in a stack overflow, effectively causing a Denial of Service condition. Developers should ensure their applications handle SVG content safely to mitigate potential risks associated with this flaw.

Affected Version(s)

Qt 6.7.0 <= 6.8.4

Qt 6.9.0 <= 6.9.2

References

CVSS V4

Score:
9.4
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

OSS-Fuzz
.
CVE-2025-10728 : SVG Rendering Vulnerability in Qt SVG Module