Back to Database
Status published
Critical
CVE-2025-10729
Use-after-free vulnerability in Qt SVG qsvghandler.cpp allows denial of service via crafted SVG
Vulnerability Description
The module will parse a <pattern> node which is not a child of a structural node. The node will be deleted after creation but might be accessed later leading to a use after free.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-10729
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- OSS-Fuzz
More from The Qt Company
View All →CVE-2025-6338
Possible denial of service with multiple incoming connections to a Schannel based server with a TLS backend
Critical
9.2
CVE-2025-5992
Passing values outside of expected range to QColorTransferGenericFunction can cause a denial of service
Low
2.3
CVE-2025-5991
Use after free in QHttp2ProtocolHandler
Low
2.1
CVE-2025-5683
When loading a specifically crafted ICNS format image file in...
Medium
5.1
CVE-2025-5455
Possible denial of service when passing malformed data in a URL to qDecodeDataUrl
High
8.4
Affected Vendor
The Qt Company
View all reports →Affected Software
Qt
Vulnerable Versions:
6.7.0, 6.9.0
Timeline
Official Publish:
October 3rd, 2025
Last Modified:
December 19th, 2025
Added to House:
July 22nd, 2026