Back to Database
Status published
Critical
CVE-2025-10728
Uncontrolled recursion in Qt SVG module
Vulnerability Description
When the module renders a Svg file that contains a <pattern> element, it might end up rendering it recursively leading to stack overflow DoS
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-10728
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- OSS-Fuzz
- Oddmund Skogen
More from The Qt Company
View All →CVE-2025-6338
Possible denial of service with multiple incoming connections to a Schannel based server with a TLS backend
Critical
9.2
CVE-2025-5992
Passing values outside of expected range to QColorTransferGenericFunction can cause a denial of service
Low
2.3
CVE-2025-5991
Use after free in QHttp2ProtocolHandler
Low
2.1
CVE-2025-5683
When loading a specifically crafted ICNS format image file in...
Medium
5.1
CVE-2025-5455
Possible denial of service when passing malformed data in a URL to qDecodeDataUrl
High
8.4
Affected Vendor
The Qt Company
View all reports →Affected Software
Qt
Vulnerable Versions:
6.7.0, 6.9.0
Timeline
Official Publish:
October 3rd, 2025
Last Modified:
October 6th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
Weaknesses (CWE)
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.