CVE-2025-10729

EUVD-2025-32489
The module will parse a <pattern> node which is not a child of a structural node. The node will be deleted after creation but might be accessed later leading to a use after free.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
TQtCCNA
9.4 CRITICAL
LOCAL
LOW
NONE
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:P/RE:H/U:Red
Base Score
CVSS 3.x
EPSS Score
Percentile: 10.71%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
qtqt
6.7.0 ≤
𝑥
≤ 6.8.4
CNA
qtqt
6.9.0 ≤
𝑥
≤ 6.9.2
CNA
Debian logo
Debian Releases
Debian Product
Codename
qt6-svg
bookworm
no-dsa
forky
6.10.2-9
fixed
sid
6.10.2-9
fixed
trixie
no-dsa
qtsvg-opensource-src
bookworm
no-dsa
bullseye
no-dsa
forky
vulnerable
sid
vulnerable
trixie
no-dsa
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
qt6-svg
jammy
needs-triage
noble
needs-triage
plucky
ignored
questing
ignored
resolute
needs-triage
qtsvg-opensource-src
bionic
not-affected
focal
not-affected
jammy
not-affected
noble
not-affected
plucky
ignored
questing
not-affected
resolute
not-affected
xenial
not-affected
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
qt5-qtsvg
Amazon Linux 2
0:5.15.3-1.amzn2.0.2
fixed
qt5-qtsvg-debuginfo
Amazon Linux 2
0:5.15.3-1.amzn2.0.2
fixed
qt5-qtsvg-devel
Amazon Linux 2
0:5.15.3-1.amzn2.0.2
fixed
qt5-qtsvg-examples
Amazon Linux 2
0:5.15.3-1.amzn2.0.2
fixed
Azure Linux logo
Azure Linux Releases
Azure Package
Release
qt5-qtsvg
CBL-Mariner 2.0
0:5.12.11-7.cm2
fixed
qtsvg
Azure Linux 3.0
0:6.6.1-3.azl3
fixed
Common Weakness Enumeration
References
https://codereview.qt-project.org/c/qt/qtsvg/+/676473