CVE-2025-10729

Use-after-free vulnerability in Qt SVG qsvghandler.cpp allows denial of service via crafted SVG PUBLISHED

Description (CNA)

The module will parse a <pattern> node which is not a child of a structural node. The node will be deleted after creation but might be accessed later leading to a use after free.

Affected (CNA)

Vendor / product	Versions
Qt / Qt	affected 6.7.0 through 6.8.4; affected 6.9.0 through 6.9.2

CWE

CWE-416

References

https://codereview.qt-project.org/c/qt/qtsvg/+/676473

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.