CVE-2026-8168
HIGH
7,1
Source: a59d8014-47c4-4630-ab43-e1b13cbe58e3
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: passive
Confidentiality: N/A
Integrity: N/A
Availability: N/A
Description
AI Translation Available
Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module (QtSvg) in Qt Group Qt allows attackers to cause a denial of service (application crash via stack exhaustion) via a crafted SVG file with deeply nested elements.
EPSS (Exploit Prediction Scoring System)
Trend Analysis
EPSS (Exploit Prediction Scoring System)
Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.
EPSS Score
0,0040
Percentile
0,3th
Updated
EPSS Score Trend (Last 2 Days)
674
Uncontrolled Recursion
DraftCommon Consequences
Security Scopes Affected:
Availability
Confidentiality
Potential Impacts:
Dos: Resource Consumption (Cpu)
Dos: Resource Consumption (Memory)
Read Application Data
Applicable Platforms
All platforms may be affected
https://codereview.qt-project.org/c/qt/qtsvg/+/730501
https://codereview.qt-project.org/c/qt/qtsvg/+/730590
https://codereview.qt-project.org/c/qt/qtsvg/+/730591
https://codereview.qt-project.org/c/qt/qtsvg/+/730892
https://codereview.qt-project.org/c/qt/qtsvg/+/731257
https://codereview.qt-project.org/c/qt/qtsvg/+/733245
https://codereview.qt-project.org/c/qt/qtsvg/+/738811
https://codereview.qt-project.org/c/qt/qtsvg/+/743488
https://codereview.qt-project.org/c/qt/qtsvg/+/748966
https://codereview.qt-project.org/c/qt/qtsvg/+/756512
https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-8168: