CVE-2025-10728
When the module renders a Svg file that contains a <pattern> element, it might end up rendering it recursively leading to stack overflow DoS
Scoring
- Severity
- CRITICAL
- CVSS base score
- 9.4
- CVSS vector
- CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:P/RE:H/U:Red
- EPSS probability
- 0.22%
- CWE
- CWE-674
- Published
- 2025-10-03
- Last modified
- 2026-07-29
Affected products
- The Qt Company Qt
- The Qt Company Qt
- Qt Qt
- Qt Qt
Weakness type
Related vulnerabilities
- CVE-2026-88763 — Skupper-router: skupper-router: unbounded recursion in amqp field parser leads to denial of service
- CVE-2026-22591 — Fast DDS DDSSQLFilter Recursive Parser Stack Exhaustion (Remote DoS)
- CVE-2026-19201 — Denial of Service via Unbounded Recursion in go-attestation Windows SIPA Parser
- CVE-2026-69378 — Microsoft Exchange Server Denial of Service Vulnerability
- CVE-2026-73321 — XenForo < 2.3.13 Uncontrolled Recursion DoS via BBCode Parser
- CVE-2026-11573 — QDomDocument::toByteArray() crashes when parsing svg file
- CVE-2026-17440 — IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
- CVE-2026-77465 — toml-node: Uncontrolled Recursion