CVE-2025-10728

NameCVE-2025-10728
DescriptionWhen the module renders a Svg file that contains a <pattern> element, it might end up rendering it recursively leading to stack overflow DoS
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
qt6-svg (PTS)bookworm6.4.2-2fixed
trixie6.8.2-3vulnerable
forky, sid6.9.2-2vulnerable
qtsvg-opensource-src (PTS)bullseye5.15.2-3fixed
bookworm5.15.8-3fixed
trixie5.15.15-2fixed
forky, sid5.15.17-2fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
qt6-svgsourcebookworm(not affected)
qt6-svgsource(unstable)(unfixed)
qtsvg-opensource-srcsource(unstable)(not affected)

Notes

[bookworm] - qt6-svg <not-affected> (Vulnerable code introduced later)
- qtsvg-opensource-src <not-affected> (Vulnerable code introduced later)
https://bugreports.qt.io/browse/QTBUG-137553
Introduced by: https://codereview.qt-project.org/c/qt/qtsvg/+/616712
Introduced by: https://code.qt.io/cgit/qt/qtsvg.git/commit/?id=0332df304f013ded362537c1f61556098b875352
Fixed by: https://codereview.qt-project.org/c/qt/qtsvg/+/654200
Fixed by: https://code.qt.io/cgit/qt/qtsvg.git/commit/?id=9e5bed9584ab65d56cd5fbac0471e06e37a54412 (dev)
Fixed by: https://code.qt.io/cgit/qt/qtsvg.git/commit/?id=ea44b50c6e61104cadd6b7c8ede92a4108634232 (v6.9.3)

Search for package or bug name: Reporting problems