qt6: qt6: Denial of Service via crafted SVG in VectorImage

A flaw was found in qt6. An attacker could exploit this vulnerability to cause a Denial of Service DoS by crashing the application. When the VectorImage component processes a specially crafted Scalable Vector Graphics SVG file, an integer calculation error triggers an invalid memory access...

SUSE CVE-2026-105923

A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type...

CVE-2026-105923

A flaw was found in qt6. An attacker could exploit this vulnerability to cause a Denial of Service DoS by crashing the application. When the VectorImage component processes a specially crafted Scalable Vector Graphics SVG file, an integer calculation error triggers an invalid memory access...

DEBIAN-CVE-2026-105923

A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type...

CVE-2026-105923

A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type...

CVE-2026-105923

A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type...

UBUNTU-CVE-2026-105923

A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type...

CVE-2026-105923 Null-pointer dereference in QTriangulator reachable through VectorImage

A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type...

CVE-2026-105923

The VectorImage QML Type is vulnerable to a null-pointer dereference caused by an integer overflow . This issue can be triggered by processing a malicious SVG file, which leads to an impact on availability . No specific exploit details or remediation versions are provided in the documents.

EUVD-2026-107159

A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type...

CVE-2026-105923

A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type...

PT-2026-120510

A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type...

Linux Distros Unpatched Vulnerability : CVE-2026-105923

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type. CVE-2026-105923 Note that Nessus reli...

Qt numeric error vulnerability

A security vulnerability exists in Qt versions from 6.8.0 up to and including 6.8.9, as well as from 6.9.0 up to and including 6.11.3. This vulnerability arises because malicious SVG files can trigger an integer overflow, resulting in a null pointer dereference in VectorImage QML Type...

qt6-qtdeclarative security update

6.10.1-1.1 - VectorImage: sanitize source string used in output CVE-2025-14576 Resolves: RHEL-173494...

qtdeclarative: Qt SVG: Arbitrary QML/JavaScript code injection via malicious SVG file

A flaw was found in the Qt SVG module and the VectorImage component in Qt Quick. This vulnerability allows a remote attacker to inject arbitrary QML/JavaScript code by tricking a user into loading a specially crafted malicious SVG file. Successful exploitation could lead to denial of service,...

qtdeclarative: Qt SVG: Arbitrary QML/JavaScript code injection via malicious SVG file

A flaw was found in the Qt SVG module and the VectorImage component in Qt Quick. This vulnerability allows a remote attacker to inject arbitrary QML/JavaScript code by tricking a user into loading a specially crafted malicious SVG file. Successful exploitation could lead to denial of service,...

SUSE CVE-2025-14576

Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading malicious SVG files through the VectorImage component in Qt Quick. While QML execution is typically more restricted than native code execution, this could still lead to denial of...

CVE-2025-14576

A flaw was found in the Qt SVG module and the VectorImage component in Qt Quick. This vulnerability allows a remote attacker to inject arbitrary QML/JavaScript code by tricking a user into loading a specially crafted malicious SVG file. Successful exploitation could lead to denial of service,...

CVE-2025-14576

Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading malicious SVG files through the VectorImage component in Qt Quick. While QML execution is typically more restricted than native code execution, this could still lead to denial of...