Denial of Service in Qt SVG Module Affecting Qt Group

CVE-2026-8168

What is CVE-2026-8168?

The Qt SVG module in Qt Group has a vulnerability that allows attackers to trigger a denial of service. This occurs due to uncontrolled recursion within the SVG parser and renderer when handling crafted SVG files containing deeply nested elements. Attackers can exploit this issue to cause application crashes through stack exhaustion, disrupting normal functionality. Mitigations have been implemented in patches addressing stack overflow issues caused by recursive calls, ensuring enhanced stability when processing complex SVG files.

References