4.0Mittel
CVE-2026-105923Null-pointer dereference in QTriangulator reachable through VectorImage
Beschreibung
A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type.
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
Referenzen und Patches
- Qt Wiki: List of known vulnerabilities in Qt products vendor-advisory
- dev patch (qtbase) patch