CVE-2025-10729: Use-after-free vulnerability in Qt SVG qsvghandler.cpp allows denial of service via crafted SVG
The module will parse a <pattern> node which is not a child of a structural node. The node will be deleted after creation but might be accessed later leading to a use after free.
Other sources
Use-after-free vulnerability in Qt SVG qsvghandler.cpp allows denial of service via crafted SVG
— Microsoft
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10729?
CVE-2025-10729 has been classified as a medium severity vulnerability.
How do I fix CVE-2025-10729?
To fix CVE-2025-10729, update to the latest version of the affected Qt SVG module that addresses this issue.
What are the potential impacts of CVE-2025-10729?
CVE-2025-10729 can lead to a use after free vulnerability, potentially allowing an attacker to execute arbitrary code.
Which software is affected by CVE-2025-10729?
CVE-2025-10729 specifically affects the Qt SVG product.
What does CVE-2025-10729 entail?
CVE-2025-10729 involves a use after free issue due to the improper handling of a <pattern> node in the Qt SVG module.