Most recent entries from all

ALSA-2025:19772 — Important: qt6-qtsvg security update

Affected: AlmaLinux:10: qt6-qtsvg, AlmaLinux:10: qt6-qtsvg-devel, AlmaLinux:10: qt6-qtsvg-examples

Scalable Vector Graphics (SVG) is an XML-based language for describing two-dimensional vector graphics. Qt provides classes for rendering and displaying SVG drawings in widgets and on other paint devices.

Security Fix(es):

* qtsvg: Use-after-free vulnerability in Qt SVG (CVE-2025-10729)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2025-13426

certfr-2025-avi-0899 — De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Certaines d'entre elles permettent à un at…

certfr-2025-avi-0899

EUVD-2026-342271

fkie_cve-2025-10729

The module will parse a <pattern> node which is not a child of a structural node. The node will be deleted after creation but might be accessed later leading to a use after free.

GHSA-cprv-rgr4-v7vh

The module will parse a <pattern> node which is not a child of a structural node. The node will be deleted after creation but might be accessed later leading to a use after free.

msrc_CVE-2025-10729 — Use-after-free vulnerability in Qt SVG qsvghandler.cpp allows denial of service via crafted SVG

msrc_CVE-2025-10729

OESA-2026-1627 — qt5-qtsvg security update

Affected: openEuler:24.03-LTS: qt5-qtsvg

The Qt SVG module provides functionality for displaying SVG images in widget, and to create SVG files using drawing commands. Security Fix(es):

The module will parse a <pattern> node which is not a child of a structural node. The node will be deleted after creation but might be accessed later leading to a use after free.(CVE-2025-10729)

openSUSE-SU-2025:15630-1 — libQt6Svg6-6.10.0-1.1 on GA media

libQt6Svg6-6.10.0-1.1 on GA media

RHSA-2025:19772 — Red Hat Security Advisory: qt6-qtsvg security update

qtsvg: Use-after-free vulnerability in Qt SVG

SUSE-SU-2026:23305-1 — Security update for qt6-svg

Security update for qt6-svg

UBUNTU-CVE-2025-10729

Affected: Ubuntu:22.04:LTS: qt6-svg, Ubuntu:24.04:LTS: qt6-svg, Ubuntu:25.10: qt6-svg, Ubuntu:26.04:LTS: qt6-svg

The module will parse a <pattern> node which is not a child of a structural node. The node will be deleted after creation but might be accessed later leading to a use after free.

WID-SEC-W-2025-2205 — QT: Mehrere Schwachstellen

Ein lokaler Angreifer kann mehrere Schwachstellen in QT ausnutzen, um einen Denial of Service Angriff durchzuführen oder nicht näher spezifizierte Angriffe durchzuführen.