{"id":"CVE-2026-105923","title":"qt6: qt6: Denial of Service via crafted SVG in VectorImage (CVE-2026-105923)","summary":"A flaw was found in qt6. An attacker could exploit this vulnerability to cause a Denial of Service (DoS) by crashing the application. When the VectorImage component processes a specially crafted Scalable Vector Graphics (SVG) file, an inte…","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvssSource":"vendor","cwe":["CWE-476","CWE-190"],"vendor":"Red Hat","product":"Red Hat Hardened Images","affected":["enterprise_linux 10","hardened_images"],"patched":["hardened_images"],"published":"2026-10-21","updated":"2026-10-25","sourceUpdated":"2026-10-25T07:01:23+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105923.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105923.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-105923"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2558168"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-105923"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105923"},{"url":"https://codereview.qt-project.org/c/qt%2Fqtbase/+/762279"},{"url":"https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products"},{"url":"https://access.redhat.com/errata/RHSA-2026:89193"}],"tags":["csaf","vex","red-hat","cve.org"],"epss":0.0012,"epssPercentile":0.01824,"scores":{"vendor":5.5,"cna":4},"ingestedAt":"2026-10-21T09:46:15.393Z","slug":"CVE-2026-105923","body":"## Overview\n\nA flaw was found in qt6. An attacker could exploit this vulnerability to cause a Denial of Service (DoS) by crashing the application. When the VectorImage component processes a specially crafted Scalable Vector Graphics (SVG) file, an integer calculation error triggers an invalid memory access (null-pointer dereference). To trigger this issue, an attacker must persuade a user or application to load the malicious SVG file.\n\n## Vendor advisories\n\n- **RHSA-2026:89193** · Red Hat · fixed in: Red Hat Hardened Images · released 2026-10-25 · [advisory](https://access.redhat.com/errata/RHSA-2026:89193)\n- **Red Hat VEX** · Moderate · affected: Red Hat Enterprise Linux 10 · no fix planned: Red Hat Enterprise Linux 10 · updated 2026-10-25 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105923.json)\n\n**qt6: qt6: Denial of Service via crafted SVG in VectorImage** — rated Moderate by Red Hat. Released 2026-10-21, updated 2026-10-25.\n\nAffected:\n\n- Red Hat Enterprise Linux 10\n\nFixed:\n\n- Red Hat Hardened Images\n\nNo fix planned:\n\n- Red Hat Enterprise Linux 10\n\n## Remediation\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/ https://access.redhat.com/errata/RHSA-2026:89193\n\nWorkarounds / mitigations:\n\n- Avoid opening or rendering untrusted SVG files in applications utilizing Qt6 QML VectorImage components.\n\nOperational controls:\n1. Verify that automated pipelines and users only process vector graphics received from trusted, verified sources.\n2. Where handling untrusted graphics is necessary, isolate Qt6-based applications within a sandbox or unprivileged container environment (such as bubblewrap or an isolated container) to confine potential application crashes.\n\nCaveats:\nOperational sandboxin…","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":30.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":228673,"id":"CVE-2026-105923","ts":1792844897640,"field":"cvss","old":"4","new":"5.5"}]}