CVE-2025-10729

EUVD-2025-32489
The module will parse a <pattern> node which is not a child of a structural node. The node will be deleted after creation but might be accessed later leading to a use after free.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
UNKNOWN
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 10%
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
qt5-qtsvg
Amazon Linux 2
0:5.15.3-1.amzn2.0.2
fixed
qt5-qtsvg-debuginfo
Amazon Linux 2
0:5.15.3-1.amzn2.0.2
fixed
qt5-qtsvg-devel
Amazon Linux 2
0:5.15.3-1.amzn2.0.2
fixed
qt5-qtsvg-examples
Amazon Linux 2
0:5.15.3-1.amzn2.0.2
fixed
Azure Linux logo
Azure Linux Releases
Azure Package
Release
qt5-qtsvg
CBL-Mariner 2.0
0:5.12.11-7.cm2
fixed
qtsvg
Azure Linux 3.0
0:6.6.1-3.azl3
fixed
Common Weakness Enumeration
References
https://codereview.qt-project.org/c/qt/qtsvg/+/676473