Affected: AlmaLinux:10: qt6-qtsvg, AlmaLinux:10: qt6-qtsvg-devel, AlmaLinux:10: qt6-qtsvg-examples
Scalable Vector Graphics (SVG) is an XML-based language for describing two-dimensional vector graphics. Qt provides classes for rendering and displaying SVG drawings in widgets and on other paint devices.
Security Fix(es):
* qtsvg: Use-after-free vulnerability in Qt SVG (CVE-2025-10729)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
The module will parse a <pattern> node which is not a child of a structural node. The node will be deleted after creation but might be accessed later leading to a use after free.
The module will parse a <pattern> node which is not a child of a structural node. The node will be deleted after creation but might be accessed later leading to a use after free.
Affected: openEuler:24.03-LTS: qt5-qtsvg
The Qt SVG module provides functionality for displaying SVG images in widget, and to create SVG files using drawing commands. Security Fix(es):
The module will parse a <pattern> node which is not a child of a structural node. The node will be deleted after creation but might be accessed later leading to a use after free.(CVE-2025-10729)
libQt6Svg6-6.10.0-1.1 on GA media
qtsvg: Use-after-free vulnerability in Qt SVG
Security update for qt6-svg
Affected: Ubuntu:22.04:LTS: qt6-svg, Ubuntu:24.04:LTS: qt6-svg, Ubuntu:25.10: qt6-svg, Ubuntu:26.04:LTS: qt6-svg
The module will parse a <pattern> node which is not a child of a structural node. The node will be deleted after creation but might be accessed later leading to a use after free.
Ein lokaler Angreifer kann mehrere Schwachstellen in QT ausnutzen, um einen Denial of Service Angriff durchzuführen oder nicht näher spezifizierte Angriffe durchzuführen.