ubuntu-cve-2025-14576
Vulnerability from osv_ubuntu
Published
2026-04-30 13:16
Modified
2026-06-30 16:13
Summary
Details
Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading malicious SVG files through the VectorImage component in Qt Quick. While QML execution is typically more restricted than native code execution, this could still lead to denial of service, information disclosure, or other impacts depending on the application's privilege level and data access.
Severity
7.8 (High)
7.8 (High)
N/A (UNKNOWN)
References
{
"affected": [
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libqt6labsanimation6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6labsfolderlistmodel6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6labsqmlmodels6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6labssettings6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6labssharedimage6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6labswavefrontmesh6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6qml6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6qmlcore6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6qmllocalstorage6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6qmlmodels6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6qmlworkerscript6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6qmlxmllistmodel6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6quick6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6quickcontrols2-6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6quickcontrols2impl6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6quickdialogs2-6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6quickdialogs2quickimpl6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6quickdialogs2utils6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6quicklayouts6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6quickparticles6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6quickshapes6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6quicktemplates2-6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6quicktest6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6quickwidgets6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml-qt6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qt-labs-animation",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qt-labs-folderlistmodel",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qt-labs-platform",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qt-labs-qmlmodels",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qt-labs-settings",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qt-labs-sharedimage",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qt-labs-wavefrontmesh",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qtcore",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qtqml",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qtqml-models",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qtqml-workerscript",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qtqml-xmllistmodel",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qtquick",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qtquick-controls",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qtquick-dialogs",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qtquick-layouts",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qtquick-localstorage",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qtquick-nativestyle",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qtquick-particles",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qtquick-shapes",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qtquick-templates",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qtquick-tooling",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qtquick-window",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qttest",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qmlscene-qt6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qt6-declarative-dev-tools",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qt6-qmltooling-plugins",
"binary_version": "6.2.4+dfsg-3ubuntu1"
}
]
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "qt6-declarative",
"purl": "pkg:deb/ubuntu/qt6-declarative@6.2.4+dfsg-3ubuntu1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.2.2+dfsg-4ubuntu1",
"6.2.4+dfsg-2ubuntu1",
"6.2.4+dfsg-3ubuntu1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libqt6labsanimation6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6labsfolderlistmodel6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6labsqmlmodels6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6labssettings6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6labssharedimage6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6labswavefrontmesh6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6qml6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6qmlcompiler6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6qmlcore6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6qmllocalstorage6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6qmlmodels6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6qmlworkerscript6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6qmlxmllistmodel6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6quick6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6quickcontrols2-6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6quickcontrols2impl6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6quickdialogs2-6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6quickdialogs2quickimpl6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6quickdialogs2utils6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6quicklayouts6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6quickparticles6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6quickshapes6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6quicktemplates2-6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6quicktest6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6quickwidgets6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml-qt6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qt-labs-animation",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qt-labs-folderlistmodel",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qt-labs-platform",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qt-labs-qmlmodels",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qt-labs-settings",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qt-labs-sharedimage",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qt-labs-wavefrontmesh",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qtcore",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qtqml",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qtqml-models",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qtqml-workerscript",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qtqml-xmllistmodel",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qtquick",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qtquick-controls",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qtquick-dialogs",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qtquick-layouts",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qtquick-localstorage",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qtquick-nativestyle",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qtquick-particles",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qtquick-shapes",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qtquick-templates",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qtquick-tooling",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qtquick-window",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qttest",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qmlscene-qt6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qt6-declarative-dev-tools",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qt6-declarative-doc-html",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qt6-declarative-examples",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qt6-qmllint-plugins",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qt6-qmltooling-plugins",
"binary_version": "6.4.2+dfsg-4build3"
}
]
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "qt6-declarative",
"purl": "pkg:deb/ubuntu/qt6-declarative@6.4.2+dfsg-4build3?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.4.2+dfsg-3",
"6.4.2+dfsg-4",
"6.4.2+dfsg-4build1",
"6.4.2+dfsg-4build2",
"6.4.2+dfsg-4build3"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libqt6labsplatform6",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "libqt6qml6",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "libqt6qmlcompiler6",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "libqt6qmlmeta6",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "libqt6qmlmodels6",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "libqt6qmlnetwork6",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "libqt6qmlworkerscript6",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "libqt6quick6",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "libqt6quickcontrols2-6",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "libqt6quickshapes6",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "libqt6quicktemplates2-6",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "libqt6quicktest6",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "libqt6quickvectorimage6",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "libqt6quickvectorimagegenerator6",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "libqt6quickwidgets6",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "qml-qt6",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "qml6-module-assets-downloader",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "qml6-module-qml",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "qml6-module-qmltime",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "qml6-module-qt-labs-animation",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "qml6-module-qt-labs-folderlistmodel",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "qml6-module-qt-labs-platform",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "qml6-module-qt-labs-qmlmodels",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "qml6-module-qt-labs-settings",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "qml6-module-qt-labs-sharedimage",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "qml6-module-qt-labs-wavefrontmesh",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "qml6-module-qtcore",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "qml6-module-qtnetwork",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "qml6-module-qtqml",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "qml6-module-qtqml-models",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "qml6-module-qtqml-workerscript",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "qml6-module-qtqml-xmllistmodel",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "qml6-module-qtquick",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "qml6-module-qtquick-controls",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "qml6-module-qtquick-dialogs",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "qml6-module-qtquick-effects",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "qml6-module-qtquick-layouts",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "qml6-module-qtquick-localstorage",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "qml6-module-qtquick-particles",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "qml6-module-qtquick-shapes",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "qml6-module-qtquick-templates",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "qml6-module-qtquick-tooling",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "qml6-module-qtquick-vectorimage",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "qml6-module-qtquick-window",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "qml6-module-qttest",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "qmlscene-qt6",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "qt6-declarative-dev-tools",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "qt6-declarative-doc-html",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "qt6-declarative-examples",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "qt6-qmllint-plugins",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "qt6-qmlls-plugins",
"binary_version": "6.9.2+dfsg-1"
},
{
"binary_name": "qt6-qmltooling-plugins",
"binary_version": "6.9.2+dfsg-1"
}
]
},
"package": {
"ecosystem": "Ubuntu:25.10",
"name": "qt6-declarative",
"purl": "pkg:deb/ubuntu/qt6-declarative@6.9.2+dfsg-1?arch=source\u0026distro=questing"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.3+dfsg-0ubuntu1",
"6.9.2+dfsg-1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libqt6labsplatform6",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "libqt6labssynchronizer6",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "libqt6qml6",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "libqt6qmlcompiler6",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "libqt6qmlmeta6",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "libqt6qmlmodels6",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "libqt6qmlnetwork6",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "libqt6qmlworkerscript6",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "libqt6quick6",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "libqt6quickcontrols2-6",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "libqt6quickshapes6",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "libqt6quickshapesdesignhelpers6",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "libqt6quicktemplates2-6",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "libqt6quicktest6",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "libqt6quickvectorimage6",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "libqt6quickvectorimagegenerator6",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "libqt6quickvectorimagehelpers6",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "libqt6quickwidgets6",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml-qt6",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qml",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qmltime",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qt-labs-animation",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qt-labs-assetdownloader",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qt-labs-folderlistmodel",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qt-labs-platform",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qt-labs-qmlmodels",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qt-labs-settings",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qt-labs-sharedimage",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qt-labs-synchronizer",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qt-labs-wavefrontmesh",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qtcore",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qtnetwork",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qtqml",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qtqml-models",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qtqml-workerscript",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qtqml-xmllistmodel",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qtquick",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qtquick-controls",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qtquick-dialogs",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qtquick-effects",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qtquick-layouts",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qtquick-localstorage",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qtquick-particles",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qtquick-shapes",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qtquick-shapes-designhelpers",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qtquick-templates",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qtquick-tooling",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qtquick-vectorimage",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qtquick-vectorimage-helpers",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qtquick-window",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qttest",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qmlscene-qt6",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qt6-declarative-dev-tools",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qt6-declarative-doc-html",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qt6-declarative-examples",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qt6-qmllint-plugins",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qt6-qmlls-plugins",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qt6-qmltooling-plugins",
"binary_version": "6.10.2+dfsg-3"
}
]
},
"package": {
"ecosystem": "Ubuntu:26.04:LTS",
"name": "qt6-declarative",
"purl": "pkg:deb/ubuntu/qt6-declarative@6.10.2+dfsg-3?arch=source\u0026distro=resolute"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.9.2+dfsg-1",
"6.9.2+dfsg-5",
"6.10.2+dfsg-3"
]
}
],
"aliases": [],
"details": "Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading malicious SVG files through the VectorImage component in Qt Quick. While QML execution is typically more restricted than native code execution, this could still lead to denial of service, information disclosure, or other impacts depending on the application\u0027s privilege level and data access.",
"id": "UBUNTU-CVE-2025-14576",
"modified": "2026-06-30T16:13:30Z",
"published": "2026-04-30T13:16:00Z",
"references": [
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2025-14576"
},
{
"type": "REPORT",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14576"
},
{
"type": "REPORT",
"url": "https://codereview.qt-project.org/c/qt/qtdeclarative/+/697273"
},
{
"type": "REPORT",
"url": "https://github.com/qt/qtdeclarative/commit/1f35339b03fcb8787028e1301012a559328815fb"
}
],
"related": [],
"schema_version": "1.7.0",
"severity": [
{
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U",
"type": "CVSS_V4"
},
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"upstream": [
"CVE-2025-14576"
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…