| Name | CVE-2025-10729 |
| Description | The module will parse a <pattern> node which is not a child of a structural node. The node will be deleted after creation but might be accessed later leading to a use after free. |
| Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
Vulnerable and fixed packages
The table below lists information on source packages.
| Source Package | Release | Version | Status |
|---|
| qt6-svg (PTS) | bookworm | 6.4.2-2 | vulnerable |
| trixie | 6.8.2-3 | vulnerable |
| forky, sid | 6.9.2-2 | vulnerable |
| qtsvg-opensource-src (PTS) | bullseye | 5.15.2-3 | vulnerable |
| bookworm | 5.15.8-3 | vulnerable |
| trixie | 5.15.15-2 | vulnerable |
| forky, sid | 5.15.17-2 | vulnerable |
The information below is based on the following data on fixed versions.
Notes
Fixed by: https://codereview.qt-project.org/c/qt/qtsvg/+/676473
Fixed by: https://code.qt.io/cgit/qt/qtsvg.git/commit/?id=7e8898903265d931df0aa54b3913f2c49d4d7bf2 (dev)
Fixed by: https://code.qt.io/cgit/qt/qtsvg.git/commit/?id=6a6273126770006232e805cf1631f93d4919b788 (v6.9.3)