CVE-2025-10728

Uncontrolled recursion in Qt SVG module

9.4 CriticalFix available

When the module renders a Svg file that contains a <pattern> element, it might end up rendering it recursively leading to stack overflow DoS

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.22%Up 0.2 points since Oct 4, 2025

What each source reports

CVE List Score used 9.4

Uncontrolled recursion in Qt SVG module

When the module renders a Svg file that contains a <pattern> element, it might end up rendering it recursively leading to stack overflow DoS

Record: CVE-2025-10728
CVSS 4.0: 9.4 CriticalCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:P/RE:H/U:Red
Weakness: CWE-674
Updated: 2026-11-02

EUVDEUVD-2025-32487 9.4

When the module renders a Svg file that contains a <pattern> element, it might end up rendering it recursively leading to stack overflow DoS

Record: EUVD-2025-32487
CVSS 4.0: 9.4 CriticalCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:P/RE:H/U:Red
Updated: 2026-11-02

GitHub AdvisoriesGHSA-x6f6-j278-6544 9.4

When the module renders a Svg file that contains a <pattern> element, it might end up rendering...

When the module renders a Svg file that contains a <pattern> element, it might end up rendering it recursively leading to stack overflow DoS

Record: GHSA-x6f6-j278-6544
CVSS 4.0: 9.4 CriticalCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:X/R:X/V:X/RE:H/U:Red
Weakness: CWE-674
Updated: 2026-11-02

NVD 9.4

When the module renders a Svg file that contains a <pattern> element, it might end up rendering it recursively leading to stack overflow DoS

Record: CVE-2025-10728
CVSS 4.0: 9.4 CriticalCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:X/R:X/V:X/RE:H/U:Red
Weakness: CWE-674
Updated: 2026-11-02

OSVDEBIAN-CVE-2025-10728 9.4

When the module renders a Svg file that contains a <pattern> element, it might end up rendering it recursively leading to stack overflow DoS

Record: DEBIAN-CVE-2025-10728
CVSS 4.0: 9.4 CriticalCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:X/R:X/V:X/RE:H/U:Red
Updated: 2026-11-02

OSVRHSA-2025:22393 4.0

Red Hat Security Advisory: qt6-qtsvg security update

Record: RHSA-2025:22393
CVSS 3.1: 4.0 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

Show 5 moreShow less

OSVRHSA-2025:22394 4.0

Red Hat Security Advisory: qt6-qtsvg security update

Record: RHSA-2025:22394
CVSS 3.1: 4.0 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVRLSA-2025:22394 4.0

Moderate: qt6-qtsvg security update

Scalable Vector Graphics (SVG) is an XML-based language for describing two-dimensional vector graphics. Qt provides classes for rendering and displaying SVG drawings in widgets and on other paint devices.

Security Fix(es):

qtsvg: Uncontrolled recursion in Qt SVG module (CVE-2025-10728)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2025:22394
CVSS 3.1: 4.0 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVUBUNTU-CVE-2025-10728 9.4

When the module renders a Svg file that contains a <pattern> element, it might end up rendering it recursively leading to stack overflow DoS

Record: UBUNTU-CVE-2025-10728
CVSS 4.0: 9.4 CriticalCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:P/RE:H/U:Red
Updated: 2026-11-02

OSVALSA-2025:22394 No score

Moderate: qt6-qtsvg security update

Security Fix(es):

qtsvg: Uncontrolled recursion in Qt SVG module (CVE-2025-10728)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2025:22394
Updated: 2026-11-02

OSVopenSUSE-SU-2025:15630-1 No score

libQt6Svg6-6.10.0-1.1 on GA media

These are all security issues fixed in the libQt6Svg6-6.10.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2025:15630-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`qt6-qtsvg` AlmaLinux:10	before 6.9.1-2.el10_1.2	6.9.1-2.el10_1.2
`qt6-qtsvg-devel` AlmaLinux:10	before 6.9.1-2.el10_1.2	6.9.1-2.el10_1.2
`qt6-qtsvg-examples` AlmaLinux:10	before 6.9.1-2.el10_1.2	6.9.1-2.el10_1.2
`qt6-svg` Debian:13	All versions, plus listed versions 6.10.2-16.10.2-26.10.2-36.10.2-46.10.2-5 Show 14 moreShow less 6.10.2-66.10.2-76.10.2-86.10.2-96.11.2-16.11.2-26.8.2-36.9.1-16.9.1-26.9.2-16.9.2-26.9.2-36.9.2-46.9.2-5	None known
`qt6-svg` Debian:14	before 6.9.2-3, plus listed versions 6.8.2-36.9.1-16.9.1-26.9.2-16.9.2-2	6.9.2-3
`qt6-qtsvg` Red Hat:enterprise_linux_eus:10.0	before 0:6.8.1-1.el10_0.2	0:6.8.1-1.el10_0.2
`qt6-qtsvg-debuginfo` Red Hat:enterprise_linux_eus:10.0	before 0:6.8.1-1.el10_0.2	0:6.8.1-1.el10_0.2
`qt6-qtsvg-debugsource` Red Hat:enterprise_linux_eus:10.0	before 0:6.8.1-1.el10_0.2	0:6.8.1-1.el10_0.2
`qt6-qtsvg-devel` Red Hat:enterprise_linux_eus:10.0	before 0:6.8.1-1.el10_0.2	0:6.8.1-1.el10_0.2
`qt6-qtsvg-tests-debuginfo` Red Hat:enterprise_linux_eus:10.0	before 0:6.8.1-1.el10_0.2	0:6.8.1-1.el10_0.2

Show 14 moreShow less

Affected packages
Package	Affected	Fixed
`qt6-qtsvg-examples` Red Hat:enterprise_linux_eus:10.0	before 0:6.8.1-1.el10_0.2	0:6.8.1-1.el10_0.2
`qt6-qtsvg` Red Hat:enterprise_linux:10.1	before 0:6.9.1-2.el10_1.2	0:6.9.1-2.el10_1.2
`qt6-qtsvg-debuginfo` Red Hat:enterprise_linux:10.1	before 0:6.9.1-2.el10_1.2	0:6.9.1-2.el10_1.2
`qt6-qtsvg-debugsource` Red Hat:enterprise_linux:10.1	before 0:6.9.1-2.el10_1.2	0:6.9.1-2.el10_1.2
`qt6-qtsvg-devel` Red Hat:enterprise_linux:10.1	before 0:6.9.1-2.el10_1.2	0:6.9.1-2.el10_1.2
`qt6-qtsvg-tests-debuginfo` Red Hat:enterprise_linux:10.1	before 0:6.9.1-2.el10_1.2	0:6.9.1-2.el10_1.2
`qt6-qtsvg-examples` Red Hat:enterprise_linux:10.1	before 0:6.9.1-2.el10_1.2	0:6.9.1-2.el10_1.2
`qt6-qtsvg` Rocky Linux:10	before 0:6.9.1-2.el10_1.2	0:6.9.1-2.el10_1.2
`qt6-svg` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.2-2ubuntu16.2.4-1ubuntu1	None known
`qt6-svg` Ubuntu:24.04:LTS	All versions, plus listed versions 6.4.2-4ubuntu16.4.2-4ubuntu26.4.2-4ubuntu3	None known
`qt6-svg` Ubuntu:25.10	All versions, plus listed versions 6.8.3-0ubuntu16.9.2-1	None known
`qt6-svg` Ubuntu:26.10	All versions, plus listed versions 6.10.2-26.10.2-8ubuntu16.10.2-96.11.2-1	None known
`qt6-svg` Ubuntu:26.04:LTS	All versions, plus listed versions 6.9.2-16.9.2-46.9.2-56.10.2-2	None known
`qt6-svg` openSUSE:Tumbleweed From an advisory covering 2 CVEs	before 6.10.0-1.1	6.10.0-1.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-10728 is a critical vulnerability (CVSS 9.4) in Qt, published October 3, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.22%, the 12th percentile. Fixed in qt6-qtsvg 6.9.1-2.el10_1.2.

References

Show 13 moreShow less