Skip to content
OpenAdvisories

Package · Azure Linux

qtsvg

2 known vulnerabilities.

2 results · Feed

  • High 7.1

    Denial-of-service vulnerability in the SVG parser and renderer impacts Qt

    Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module (QtSvg) in Qt Group Qt allows attackers to cause a denial of service (application crash via stack exhaustion) via a crafted SVG file with deeply nested elements.

  • Critical 9.4

    Use-after-free vulnerability in Qt SVG qsvghandler.cpp allows denial of service via crafted SVG

    The module will parse a <pattern> node which is not a child of a structural node. The node will be deleted after creation but might be accessed later leading to a use after free.