Description (CNA)
Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module (QtSvg) in Qt Group Qt allows attackers to cause a denial of service (application crash via stack exhaustion) via a crafted SVG file with deeply nested elements.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| qt / qt | affected 4.1.0 before 6.8.9; affected 6.9.0 before 6.11.2; unknown 0 before 4.1.0 |
CWE
CWE-674
References
- https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-8168:
- https://codereview.qt-project.org/c/qt/qtsvg/+/730591
- https://codereview.qt-project.org/c/qt/qtsvg/+/730501
- https://codereview.qt-project.org/c/qt/qtsvg/+/731257
- https://codereview.qt-project.org/c/qt/qtsvg/+/730892
- https://codereview.qt-project.org/c/qt/qtsvg/+/733245
- https://codereview.qt-project.org/c/qt/qtsvg/+/738811
- https://codereview.qt-project.org/c/qt/qtsvg/+/730590
- https://codereview.qt-project.org/c/qt/qtsvg/+/743488
- https://codereview.qt-project.org/c/qt/qtsvg/+/748966
- https://codereview.qt-project.org/c/qt/qtsvg/+/756512
ADP enrichment
No English description supplied.
No references supplied.