CVE-2025-10728 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
TQtC	CNA	9.4 CRITICAL	LOCAL	LOW	NONE	CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:P/RE:H/U:Red

Base Score

CVSS 3.x

EPSS Score

Percentile: 10.6%

Early Detection

Affected products identified ahead of NVD analysis through intelligence sources.

Vendor	Product	Version	Source
qt	qt	6.7.0 ≤ 𝑥 ≤ 6.8.4	CNA
qt	qt	6.9.0 ≤ 𝑥 ≤ 6.9.2	CNA

Debian Releases

Debian Product

Codename

qt6-svg

bookworm	6.4.2-2 fixed
forky	6.10.2-9 fixed
sid	6.10.2-9 fixed
trixie	no-dsa

qtsvg-opensource-src

bookworm	5.15.8-3 fixed
bullseye	5.15.2-3 fixed
forky	5.15.19-2 fixed
sid	5.15.19-2 fixed
trixie	5.15.15-2 fixed

Ubuntu Releases

Ubuntu Product

Codename

qt6-svg

jammy	needs-triage
noble	needs-triage
plucky	ignored
questing	ignored
resolute	needs-triage

qtsvg-opensource-src

bionic	not-affected
focal	not-affected
jammy	not-affected
noble	not-affected
plucky	not-affected
questing	not-affected
resolute	not-affected
xenial	not-affected

Common Weakness Enumeration

CWE-674 - Uncontrolled Recursion
The product does not properly control the amount of recursion which takes place, consuming excessive resources, such as allocated memory or the program stack.

References

https://codereview.qt-project.org/c/qt/qtsvg/+/654200