CVE-2026-105923

Description (CNA)

A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type.

Affected (CNA)

CWE

CWE-476, CWE-190

References

• https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products
• https://codereview.qt-project.org/c/qt%2Fqtbase/+/762279