CVE-2026-79616

Summary

Out-of-bounds read while parsing untrusted SVG path strings in Qt Quick's Context2D.path / PathSvg.path.

Affected Software

VendorProductVersion RangeStatus
qtqt5.10.0 <= 6.8.8affected
qtqt6.9.0 <= 6.11.1affected

Weaknesses

  • CWE-125: CWE-125 Out-of-bounds Read

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References