CVE Catalog
CVE-2025-10728
CriticalCVSS 9.4Exploitation Probability (EPSS)
Low risk0.20%
11th percentile - higher than 11% of all known CVEs
Summary
Rendering an SVG file with a <pattern> element may cause recursive rendering, leading to stack overflow and DoS.
Risk Assessment
An attacker can supply a crafted SVG file to crash the application.
Recommendation
Update to a version that limits recursion depth or handles <pattern> correctly.
Original NVD description (English source)
When the module renders a Svg file that contains a <pattern> element, it might end up rendering it recursively leading to stack overflow DoS