CVE-2026-8168
Denial-of-service vulnerability in the SVG parser and renderer impacts Qt
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module (QtSvg) in Qt Group Qt allows attackers to cause a denial of service (application crash via stack exhaustion) via a crafted SVG file with deeply nested elements.
| CWE | CWE-674 |
| Vendor | qt |
| Product | qt |
| Published | Oct 19, 2026 |
| Last Updated | Oct 19, 2026 |
Stay Ahead of the Next One
Get instant alerts for qt qt
Be the first to know when new unknown vulnerabilities affecting qt qt are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
qt / qt
4.1.0 < 6.8.9 6.9.0 < 6.11.2
References
wiki.qt.io: https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-8168: codereview.qt-project.org: https://codereview.qt-project.org/c/qt/qtsvg/+/730591 codereview.qt-project.org: https://codereview.qt-project.org/c/qt/qtsvg/+/730501 codereview.qt-project.org: https://codereview.qt-project.org/c/qt/qtsvg/+/731257 codereview.qt-project.org: https://codereview.qt-project.org/c/qt/qtsvg/+/730892 codereview.qt-project.org: https://codereview.qt-project.org/c/qt/qtsvg/+/733245 codereview.qt-project.org: https://codereview.qt-project.org/c/qt/qtsvg/+/738811 codereview.qt-project.org: https://codereview.qt-project.org/c/qt/qtsvg/+/730590 codereview.qt-project.org: https://codereview.qt-project.org/c/qt/qtsvg/+/743488 codereview.qt-project.org: https://codereview.qt-project.org/c/qt/qtsvg/+/748966 codereview.qt-project.org: https://codereview.qt-project.org/c/qt/qtsvg/+/756512