Threats tagged 'ghsa-mh4x-qpf6-hr3q'

CVE-2026-6210 is a type confusion vulnerability in Qt SVG affecting versions from 6.7.0 before 6.8.8 and from 6.9.0 before 6.11.1. It occurs when the renderer processes SVG marker references and incorrectly casts a node to QSvgMarker* without verifying its type. This can lead to an out-of-bounds heap read and endless recursion, resulting in an application crash (denial of service).