Use-after-free vulnerability in Qt SVG qsvghandler.cpp allows denial of service via crafted SVG
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 9.4epss 0.2%
exploitation probability
0.2%top 89% of all CVEs
observed exploitation
nono source reports it
The module will parse a <pattern> node which is not a child of a structural node. The node will be deleted after creation but might be accessed later leading to a use after free.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:P/RE:H/U:Red
Affected products
Qt · Qt