CVE-2025-10728: CWE-674 Uncontrolled Recursion in Qt
When the module renders a Svg file that contains a <pattern> element, it might end up rendering it recursively leading to stack overflow DoS
AI Analysis
Technical Summary
This vulnerability involves uncontrolled recursion during the rendering of SVG files with <pattern> elements in the Qt framework. The recursive rendering can cause a stack overflow, leading to a denial of service condition. The CVSS 4.0 score of 9.4 indicates a critical severity with high impact on confidentiality, integrity, availability, and security controls. The affected versions explicitly include Qt 6.7.0 and 6.9.0. There is no indication of known exploits in the wild or available patches at this time.
Potential Impact
Successful exploitation causes a denial of service via stack overflow due to uncontrolled recursion in SVG pattern rendering. This can crash applications using the affected Qt versions, potentially disrupting services relying on Qt for SVG rendering.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid processing untrusted SVG files containing <pattern> elements in affected Qt versions 6.7.0 and 6.9.0.
CVE-2025-10728: CWE-674 Uncontrolled Recursion in Qt
Description
When the module renders a Svg file that contains a <pattern> element, it might end up rendering it recursively leading to stack overflow DoS
CVSS v4.0
Score 9.4critical
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability involves uncontrolled recursion during the rendering of SVG files with <pattern> elements in the Qt framework. The recursive rendering can cause a stack overflow, leading to a denial of service condition. The CVSS 4.0 score of 9.4 indicates a critical severity with high impact on confidentiality, integrity, availability, and security controls. The affected versions explicitly include Qt 6.7.0 and 6.9.0. There is no indication of known exploits in the wild or available patches at this time.
Potential Impact
Successful exploitation causes a denial of service via stack overflow due to uncontrolled recursion in SVG pattern rendering. This can crash applications using the affected Qt versions, potentially disrupting services relying on Qt for SVG rendering.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid processing untrusted SVG files containing <pattern> elements in affected Qt versions 6.7.0 and 6.9.0.
Technical Details
- Data Version
- 5.1
- Assigner Short Name
- TQtC
- Date Reserved
- 2025-09-19T14:01:04.716Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 68dfe0218ea44fea9ba2abad
Added to database: 10/03/2025, 14:39:29 UTC
Last enriched: 07/29/2026, 21:35:29 UTC
Last updated: 09/10/2026, 19:36:49 UTC
Views: 339
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.