Skip to content
OpenAdvisories

Package · Ubuntu

qt6-declarative

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.4
    CVE-2025-14576

    Possible QML code injection in VectorImage component

    Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading malicious SVG files through the VectorImage component in Qt Quick. While QML execution is typically more restricted than native code execution, th…

    Qt Project Qt qt6-declarative qt6-declarative Debian Ubuntu
  • High 8.7
    CVE-2025-12385

    Improper validation of <img> tag size in Text component parser

    Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation. This issue affects users …

    Qt Project Qt qt6-declarative qtdeclarative-opensource-src Debian Ubuntu Azure Linux