Affected: AlmaLinux:10: qt6-qtsvg, AlmaLinux:10: qt6-qtsvg-devel, AlmaLinux:10: qt6-qtsvg-examples

Scalable Vector Graphics (SVG) is an XML-based language for describing two-dimensional vector graphics. Qt provides classes for rendering and displaying SVG drawings in widgets and on other paint devices.

Security Fix(es):

* qtsvg: Uncontrolled recursion in Qt SVG module (CVE-2025-10728)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

When the module renders a Svg file that contains a <pattern> element, it might end up rendering it recursively leading to stack overflow DoS

When the module renders a Svg file that contains a <pattern> element, it might end up rendering it recursively leading to stack overflow DoS

libQt6Svg6-6.10.0-1.1 on GA media

qtsvg: Uncontrolled recursion in Qt SVG module

Affected: Ubuntu:22.04:LTS: qt6-svg, Ubuntu:24.04:LTS: qt6-svg, Ubuntu:25.10: qt6-svg, Ubuntu:26.04:LTS: qt6-svg

When the module renders a Svg file that contains a <pattern> element, it might end up rendering it recursively leading to stack overflow DoS

Ein lokaler Angreifer kann mehrere Schwachstellen in QT ausnutzen, um einen Denial of Service Angriff durchzuführen oder nicht näher spezifizierte Angriffe durchzuführen.