{"id":"CVE-2025-14576","aliases":["DEBIAN-CVE-2025-14576","EUVD-2025-209594","GHSA-4hpm-v49g-rq7q","RHSA-2026:20567","RHSA-2026:24987","RHSA-2026:7620","RHSA-2026:7846","RLSA-2026:20567","UBUNTU-CVE-2025-14576"],"status":"published","title":"Possible QML code injection in VectorImage component","description":"Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading malicious SVG files through the VectorImage component in Qt Quick. While QML execution is typically more restricted than native code execution, this could still lead to denial of service, information disclosure, or other impacts depending on the application's privilege level and data access.","severity":{"version":"4.0","score":7.4,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00224,"percentile":0.13133,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20","CWE-94"],"published":"2026-04-30T12:39:40Z","modified":"2026-10-24T10:30:22Z","fixes":[{"ecosystem":"Debian:14","package":"qt6-declarative","fixed_in":["6.10.2+dfsg-4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qt6-qtdeclarative","fixed_in":["0:6.10.1-1.el10_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qt6-qtdeclarative-debuginfo","fixed_in":["0:6.10.1-1.el10_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qt6-qtdeclarative-debugsource","fixed_in":["0:6.10.1-1.el10_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qt6-qtdeclarative-devel","fixed_in":["0:6.10.1-1.el10_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qt6-qtdeclarative-devel-debuginfo","fixed_in":["0:6.10.1-1.el10_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qt6-qtdeclarative-examples-debuginfo","fixed_in":["0:6.10.1-1.el10_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qt6-qtdeclarative-tests-debuginfo","fixed_in":["0:6.10.1-1.el10_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qt6-qtdeclarative-examples","fixed_in":["0:6.10.1-1.el10_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qt6-qtdeclarative-static","fixed_in":["0:6.10.1-1.el10_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"qt6-qtdeclarative","fixed_in":["0:6.8.1-5.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"qt6-qtdeclarative-debuginfo","fixed_in":["0:6.8.1-5.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"qt6-qtdeclarative-debugsource","fixed_in":["0:6.8.1-5.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"qt6-qtdeclarative-devel","fixed_in":["0:6.8.1-5.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"qt6-qtdeclarative-devel-debuginfo","fixed_in":["0:6.8.1-5.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"qt6-qtdeclarative-examples-debuginfo","fixed_in":["0:6.8.1-5.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"qt6-qtdeclarative-tests-debuginfo","fixed_in":["0:6.8.1-5.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"qt6-qtdeclarative-examples","fixed_in":["0:6.8.1-5.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"qt6-qtdeclarative-static","fixed_in":["0:6.8.1-5.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"qt5","fixed_in":["0:5.15.18-2.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"qt5-filesystem","fixed_in":["0:5.15.18-2.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"qt5-rpm-macros","fixed_in":["0:5.15.18-2.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"qt5-srpm-macros","fixed_in":["0:5.15.18-2.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"qt6","fixed_in":["0:6.11.0-1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"qt6-filesystem","fixed_in":["0:6.11.0-1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"qt6-rpm-macros","fixed_in":["0:6.11.0-1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"qt6-srpm-macros","fixed_in":["0:6.11.0-1.hum1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"qt6-qtdeclarative","fixed_in":["0:6.10.1-1.el10_2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"qt6-declarative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.10.2+dfsg-1","6.10.2+dfsg-2","6.10.2+dfsg-3","6.10.2+dfsg-4","6.10.2+dfsg-5","6.10.2+dfsg-6","6.11.2+dfsg-1","6.11.2+dfsg-2","6.11.2+dfsg-3","6.4.2+dfsg-1","6.4.2+dfsg-2","6.4.2+dfsg-3","6.4.2+dfsg-4","6.6.0+dfsg-1","6.6.0+dfsg-2","6.6.0+dfsg-3","6.6.1+dfsg-1","6.6.1+dfsg-2","6.6.1+dfsg-3","6.6.2+dfsg-1","6.6.2+dfsg-2","6.6.2+dfsg-3","6.6.2+dfsg-4","6.6.2+dfsg-4+hurd.1","6.7.2+dfsg-1","6.7.2+dfsg-10","6.7.2+dfsg-10+hurd.1","6.7.2+dfsg-11","6.7.2+dfsg-2","6.7.2+dfsg-3","6.7.2+dfsg-4","6.7.2+dfsg-5","6.7.2+dfsg-6","6.7.2+dfsg-7","6.7.2+dfsg-8","6.7.2+dfsg-9","6.8.2+dfsg-1","6.8.2+dfsg-2","6.8.2+dfsg-3","6.8.2+dfsg-4","6.8.2+dfsg-5","6.8.2+dfsg-6","6.8.2+dfsg-6+alpha","6.8.2+dfsg-6+hurd.1","6.8.2+dfsg-7","6.8.2+dfsg-7+m68k","6.9.1+dfsg-1","6.9.1+dfsg-2","6.9.2+dfsg-1","6.9.2+dfsg-2","6.9.2+dfsg-3","6.9.2+dfsg-4","6.9.2+dfsg-5","6.9.2+dfsg-6"]},{"source":"osv","ecosystem":"Debian:13","package":"qt6-declarative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.10.2+dfsg-1","6.10.2+dfsg-2","6.10.2+dfsg-3","6.10.2+dfsg-4","6.10.2+dfsg-5","6.10.2+dfsg-6","6.11.2+dfsg-1","6.11.2+dfsg-2","6.11.2+dfsg-3","6.8.2+dfsg-7","6.8.2+dfsg-7+m68k","6.9.1+dfsg-1","6.9.1+dfsg-2","6.9.2+dfsg-1","6.9.2+dfsg-2","6.9.2+dfsg-3","6.9.2+dfsg-4","6.9.2+dfsg-5","6.9.2+dfsg-6"]},{"source":"osv","ecosystem":"Debian:14","package":"qt6-declarative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.10.2+dfsg-4"}]}],"versions":["6.10.2+dfsg-1","6.10.2+dfsg-2","6.10.2+dfsg-3","6.8.2+dfsg-7","6.8.2+dfsg-7+m68k","6.9.1+dfsg-1","6.9.1+dfsg-2","6.9.2+dfsg-1","6.9.2+dfsg-2","6.9.2+dfsg-3","6.9.2+dfsg-4","6.9.2+dfsg-5","6.9.2+dfsg-6"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qt6-qtdeclarative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.10.1-1.el10_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qt6-qtdeclarative-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.10.1-1.el10_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qt6-qtdeclarative-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.10.1-1.el10_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qt6-qtdeclarative-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.10.1-1.el10_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qt6-qtdeclarative-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.10.1-1.el10_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qt6-qtdeclarative-examples-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.10.1-1.el10_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qt6-qtdeclarative-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.10.1-1.el10_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qt6-qtdeclarative-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.10.1-1.el10_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qt6-qtdeclarative-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.10.1-1.el10_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"qt6-qtdeclarative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.1-5.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"qt6-qtdeclarative-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.1-5.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"qt6-qtdeclarative-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.1-5.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"qt6-qtdeclarative-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.1-5.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"qt6-qtdeclarative-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.1-5.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"qt6-qtdeclarative-examples-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.1-5.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"qt6-qtdeclarative-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.1-5.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"qt6-qtdeclarative-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.1-5.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"qt6-qtdeclarative-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.1-5.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"qt5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.18-2.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"qt5-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.18-2.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"qt5-rpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.18-2.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"qt5-srpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.18-2.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"qt6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.11.0-1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"qt6-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.11.0-1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"qt6-rpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.11.0-1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"qt6-srpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.11.0-1.hum1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"qt6-qtdeclarative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.10.1-1.el10_2.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"qt6-declarative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.2+dfsg-4ubuntu1","6.2.4+dfsg-2ubuntu1","6.2.4+dfsg-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"qt6-declarative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.4.2+dfsg-3","6.4.2+dfsg-4","6.4.2+dfsg-4build1","6.4.2+dfsg-4build2","6.4.2+dfsg-4build3"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"qt6-declarative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.3+dfsg-0ubuntu1","6.9.2+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"qt6-declarative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.10.2+dfsg-3","6.10.2+dfsg-6","6.11.2+dfsg-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"qt6-declarative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.9.2+dfsg-1","6.9.2+dfsg-5","6.10.2+dfsg-3"]}],"products":[{"vendor":"qt","product":"qt"},{"vendor":"qt","product":"qtdeclarative"},{"vendor":"red hat","product":"multicluster global hub"},{"vendor":"red hat","product":"red hat advanced cluster management for kubernetes 2"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 10.0 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat hardened images"},{"vendor":"red hat","product":"red hat openshift container platform 4"},{"vendor":"red hat","product":"red hat openshift gitops"},{"vendor":"the qt company","product":"qt"}],"references":[{"url":"https://codereview.qt-project.org/c/qt/qtdeclarative/+/697273","tags":["patch","Patch","fix","article","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-14576","tags":["vdb-entry","x_refsource_REDHAT","web","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2464114","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-14576.json","tags":["x_sadp-csaf-vex","web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:24987","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:20567","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:7620","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:7846","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-14576","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-4hpm-v49g-rq7q"},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-14576","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_20567.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-14576","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_24987.json","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7620.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7846.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:20567","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-14576","tags":["report"]},{"url":"https://github.com/qt/qtdeclarative/commit/1f35339b03fcb8787028e1301012a559328815fb","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2025-14576","title":"Possible QML code injection in VectorImage component","description":"Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading malicious SVG files through the VectorImage component in Qt Quick. While QML execution is typically more restricted than native code execution, this could still lead to denial of service, information disclosure, or other impacts depending on the application's privilege level and data access.","status":"published","published":"2026-04-30T12:39:40.067Z","modified":"2026-07-29T08:59:25.234Z","cvss":[{"version":"4.0","score":7.4,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U","level":"high","assessor":"cna"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-94","CWE-20","CWE-94"],"updated_at":"2026-11-02T14:32:28.621398Z"}],"euvd":[{"id":"EUVD-2025-209594","description":"Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading malicious SVG files through the VectorImage component in Qt Quick. While QML execution is typically more restricted than native code execution, this could still lead to denial of service, information disclosure, or other impacts depending on the application's privilege level and data access.","status":"published","published":"2026-04-30T12:39:40Z","modified":"2026-07-29T08:59:25Z","cvss":[{"version":"4.0","score":7.4,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U","level":"high"}],"updated_at":"2026-11-02T18:02:30.59681Z"}],"ghsa":[{"id":"GHSA-4hpm-v49g-rq7q","title":"Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code...","description":"Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading malicious SVG files through the VectorImage component in Qt Quick. While QML execution is typically more restricted than native code execution, this could still lead to denial of service, information disclosure, or other impacts depending on the application's privilege level and data access.","status":"published","published":"2026-04-30T15:30:39Z","modified":"2026-06-30T03:37:34Z","cvss":[{"version":"4.0","score":7.4,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-20","CWE-94"],"updated_at":"2026-11-02T15:09:05.934873Z"}],"nvd":[{"id":"CVE-2025-14576","description":"Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading malicious SVG files through the VectorImage component in Qt Quick. While QML execution is typically more restricted than native code execution, this could still lead to denial of service, information disclosure, or other impacts depending on the application's privilege level and data access.","status":"published","published":"2026-04-30T13:16:02.85Z","modified":"2026-10-07T09:10:00.16Z","cvss":[{"version":"4.0","score":7.4,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-20","CWE-94"],"updated_at":"2026-11-02T14:12:02.090779Z"}],"osv":[{"id":"CVE-2025-14576","description":"Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading malicious SVG files through the VectorImage component in Qt Quick. While QML execution is typically more restricted than native code execution, this could still lead to denial of service, information disclosure, or other impacts depending on the application's privilege level and data access.","status":"published","published":"2026-04-30T13:16:02.85Z","modified":"2026-10-24T10:30:22.207623454Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:46.340268Z"},{"id":"DEBIAN-CVE-2025-14576","description":"Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading malicious SVG files through the VectorImage component in Qt Quick. While QML execution is typically more restricted than native code execution, this could still lead to denial of service, information disclosure, or other impacts depending on the application's privilege level and data access.","status":"published","published":"2026-04-30T13:16:02.85Z","modified":"2026-10-08T09:47:29.294141533Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:45.102284Z"},{"id":"RHSA-2026:20567","title":"Red Hat Security Advisory: qt6-qtdeclarative security update","status":"published","published":"2026-05-26T10:07:31Z","modified":"2026-10-15T10:14:45Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:24987","title":"Red Hat Security Advisory: qt6-qtdeclarative security update","status":"published","published":"2026-06-10T10:08:07Z","modified":"2026-10-15T10:15:38Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:7620","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-05-07T10:10:48Z","modified":"2026-10-15T10:27:13Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:7846","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-05-07T10:10:54Z","modified":"2026-10-15T10:27:42Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RLSA-2026:20567","title":"Important: qt6-qtdeclarative security update","description":"Qt6 - QtDeclarative component.\n\nSecurity Fix(es):\n\n* qt: Qt SVG: Arbitrary QML/JavaScript code injection via malicious SVG file (CVE-2025-14576)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-06-04T12:04:37.164871Z","modified":"2026-06-04T12:30:17.343565266Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"UBUNTU-CVE-2025-14576","description":"Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading malicious SVG files through the VectorImage component in Qt Quick. While QML execution is typically more restricted than native code execution, this could still lead to denial of service, information disclosure, or other impacts depending on the application's privilege level and data access.","status":"published","published":"2026-04-30T13:16:00Z","modified":"2026-10-17T12:57:00.811688454Z","cvss":[{"version":"4.0","score":7.4,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U","level":"high"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:55:20.144818Z"}]}}