https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 22:57:40 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-342274 EUVD-2026-342274 https://cve.radiocsirt.org/vuln/euvd-2026-342274 https://cve.radiocsirt.org/vuln/fkie_cve-2025-14576 <p>Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading malicious SVG files through the VectorImage component in Qt Quick. While QML execution is typically more restricted than native code execution, this could still lead to denial of service, information disclosure, or other impacts depending on the application&#39;s privilege level and data access.</p> <p>Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading malicious SVG files through the VectorImage component in Qt Quick. While QML execution is typically more restricted than native code execution, this could still lead to denial of service, information disclosure, or other impacts depending on the application&#39;s privilege level and data access.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-14576 https://cve.radiocsirt.org/vuln/ghsa-4hpm-v49g-rq7q <p>Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading malicious SVG files through the VectorImage component in Qt Quick. While QML execution is typically more restricted than native code execution, this could still lead to denial of service, information disclosure, or other impacts depending on the application&#39;s privilege level and data access.</p> <p>Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading malicious SVG files through the VectorImage component in Qt Quick. While QML execution is typically more restricted than native code execution, this could still lead to denial of service, information disclosure, or other impacts depending on the application&#39;s privilege level and data access.</p> https://cve.radiocsirt.org/vuln/ghsa-4hpm-v49g-rq7q https://cve.radiocsirt.org/vuln/rhsa-2026:20567 <p>qt: Qt SVG: Arbitrary QML/JavaScript code injection via malicious SVG file</p> <p>qt: Qt SVG: Arbitrary QML/JavaScript code injection via malicious SVG file</p> https://cve.radiocsirt.org/vuln/rhsa-2026:20567 https://cve.radiocsirt.org/vuln/rhsa-2026:24987 <p>qt: Qt SVG: Arbitrary QML/JavaScript code injection via malicious SVG file</p> <p>qt: Qt SVG: Arbitrary QML/JavaScript code injection via malicious SVG file</p> https://cve.radiocsirt.org/vuln/rhsa-2026:24987 https://cve.radiocsirt.org/vuln/rlsa-2026:20567 <p><strong>Affected:</strong> Rocky Linux:10: qt6-qtdeclarative</p> <p>Qt6 - QtDeclarative component.</p> <p>Security Fix(es):</p> <p>* qt: Qt SVG: Arbitrary QML/JavaScript code injection via malicious SVG file (CVE-2025-14576)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> Rocky Linux:10: qt6-qtdeclarative</p> <p>Qt6 - QtDeclarative component.</p> <p>Security Fix(es):</p> <p>* qt: Qt SVG: Arbitrary QML/JavaScript code injection via malicious SVG file (CVE-2025-14576)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/rlsa-2026:20567 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-14576 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: qt6-declarative, Ubuntu:24.04:LTS: qt6-declarative, Ubuntu:25.10: qt6-declarative, Ubuntu:26.04:LTS: qt6-declarative</p> <p>Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading malicious SVG files through the VectorImage component in Qt Quick. While QML execution is typically more restricted than native code execution, this could still lead to denial of service, information disclosure, or other impacts depending on the application&#39;s privilege level and data access.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: qt6-declarative, Ubuntu:24.04:LTS: qt6-declarative, Ubuntu:25.10: qt6-declarative, Ubuntu:26.04:LTS: qt6-declarative</p> <p>Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading malicious SVG files through the VectorImage component in Qt Quick. While QML execution is typically more restricted than native code execution, this could still lead to denial of service, information disclosure, or other impacts depending on the application&#39;s privilege level and data access.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-14576 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1338 <p>Ein lokaler Angreifer kann eine Schwachstelle in QT ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in QT ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1338