Vulnerability Description
A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type.
Related Weaknesses (CWE)
References
- https://codereview.qt-project.org/c/qt%2Fqtbase/+/762279
- https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products
FAQ
What is CVE-2026-105923?
CVE-2026-105923 is a documented vulnerability. A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type.
How severe is CVE-2026-105923?
CVSS scoring is not yet available for CVE-2026-105923. Check NVD for updates.
Is there a patch for CVE-2026-105923?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.