Qt SVG vulnerabilities

Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module (QtSvg) in Qt allows a crafted SVG file with deeply nested elements to cause stack exhaustion and application crash (denial of service).

A type confusion vulnerability in Qt SVG allows an attacker to cause an application crash via a crafted SVG image. The issue occurs when processing SVG marker references, where the renderer does not verify the node type before casting.

Insufficient validation of node IDs in the Qt SVG module allows arbitrary QML/JavaScript code injection when loading malicious SVG files through the VectorImage component in Qt Quick. Although QML execution is typically more restricted than native code execution, this could still lead to denial of service, information disclosure, or other impacts depending on the application's privilege level and data access.