High severityNVD Advisory· Published Oct 19, 2026· Updated Oct 19, 2026
CVE-2026-8168
CVE-2026-8168
Description
Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module (QtSvg) in Qt Group Qt allows attackers to cause a denial of service (application crash via stack exhaustion) via a crafted SVG file with deeply nested elements.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
11- codereview.qt-project.org/c/qt/qtsvg/+/730501nvd
- codereview.qt-project.org/c/qt/qtsvg/+/730590nvd
- codereview.qt-project.org/c/qt/qtsvg/+/730591nvd
- codereview.qt-project.org/c/qt/qtsvg/+/730892nvd
- codereview.qt-project.org/c/qt/qtsvg/+/731257nvd
- codereview.qt-project.org/c/qt/qtsvg/+/733245nvd
- codereview.qt-project.org/c/qt/qtsvg/+/738811nvd
- codereview.qt-project.org/c/qt/qtsvg/+/743488nvd
- codereview.qt-project.org/c/qt/qtsvg/+/748966nvd
- codereview.qt-project.org/c/qt/qtsvg/+/756512nvd
- wiki.qt.io/List_of_known_vulnerabilities_in_Qt_productsnvd
News mentions
0No linked articles in our index yet.