CVE-2025-10728: Uncontrolled recursion in Qt SVG module
Uncontrolled recursion in Qt SVG module
Other sources
When the module renders a Svg file that contains a <pattern> element, it might end up rendering it recursively leading to stack overflow DoS
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10728?
CVE-2025-10728 has been classified as a denial of service vulnerability due to potential stack overflow.
How do I fix CVE-2025-10728?
To mitigate CVE-2025-10728, ensure that you update to the latest version of the Qt SVG Module that addresses this vulnerability.
What type of attack does CVE-2025-10728 facilitate?
CVE-2025-10728 facilitates a denial of service attack by causing a stack overflow when processing a specific SVG pattern.
Which version of Qt SVG Module is affected by CVE-2025-10728?
CVE-2025-10728 affects the Qt SVG Module without specifying any particular version, making all versions potentially vulnerable.
How can I determine if my application is vulnerable to CVE-2025-10728?
You can determine if your application is vulnerable to CVE-2025-10728 by checking if it uses the affected Qt SVG Module and whether it processes SVG files containing <pattern> elements.