Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Fixed packages 3

Vulnerabilities 2

• Critical 9.4
  CVE-2025-10728

  Uncontrolled recursion in Qt SVG module

  When the module renders a Svg file that contains a <pattern> element, it might end up rendering it recursively leading to stack overflow DoS

  Qt Project Qt qt6-svg qt6-svg Debian Ubuntu
  Oct 3, 2025
• High 7.1
  CVE-2026-8168

  Denial-of-service vulnerability in the SVG parser and renderer impacts Qt

  Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module (QtSvg) in Qt Group Qt allows attackers to cause a denial of service (application crash via stack exhaustion) via a crafted SVG file with deeply nested elements.

  Qt Project Qt qt6-svg qtsvg-opensource-src Debian Ubuntu Azure Linux
  Oct 19, 2026

References

• article
  https://images.redhat.com/
• report
  https://access.redhat.com/security/cve/CVE-2026-8168
• article
  https://access.redhat.com/security/updates/classification/
• report
  https://access.redhat.com/security/cve/CVE-2025-10728
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_58460.json
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2401244
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-10728
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-10728
• article
  https://codereview.qt-project.org/c/qt/qtsvg/+/654200
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2555573
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-8168
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-8168
• article
  https://codereview.qt-project.org/c/qt/qtsvg/+/730501
• article
  https://codereview.qt-project.org/c/qt/qtsvg/+/730590
• article
  https://codereview.qt-project.org/c/qt/qtsvg/+/730591
• article
  https://codereview.qt-project.org/c/qt/qtsvg/+/730892
• article
  https://codereview.qt-project.org/c/qt/qtsvg/+/731257
• article
  https://codereview.qt-project.org/c/qt/qtsvg/+/733245
• article
  https://codereview.qt-project.org/c/qt/qtsvg/+/738811
• article
  https://codereview.qt-project.org/c/qt/qtsvg/+/743488
• article
  https://codereview.qt-project.org/c/qt/qtsvg/+/748966
• article
  https://codereview.qt-project.org/c/qt/qtsvg/+/756512
• article
  https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-8168: