MEDIUM 4.0 NVD
CVE-2026-105923
A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type.
A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type.
References
- https://codereview.qt-project.org/c/qt%2Fqtbase/+/762279
- https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products
This medium severity vulnerability with a CVSS score of 4.0 was published on 2026-10-21 via NVD.
vulnfeed aggregates 18720 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.