CVE-2026-8168

Severity not reported

Data quality: awaiting analysis. NVD has not completed analysis, so CVSS and affected-product data may be missing or change.

Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module (QtSvg) in Qt Group Qt allows attackers to cause a denial of service (application cr…

Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module (QtSvg) in Qt Group Qt allows attackers to cause a denial of service (application crash via stack exhaustion) via a crafted SVG file with deeply nested elements.

CVSS

—

Awaiting analysis by NVD

Timeline (UTC)

Published: 2026-10-19 14:17

Modified: 2026-10-19 21:13

NVD status: Awaiting Analysis

Last synced 1 day ago

Verified against the source API 2026-10-27 07:03 UTC

Exploitation

Not listed in CISA KEV (as of last catalog sync)

Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).

Affected products

Not reported by the source (unknown — not "none").

Weakness classification (CWE)

CWE-674

Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.

Mitigation & advisories

No vendor advisory or patch reference tagged by NVD. Check the references below.

References

https://codereview.qt-project.org/c/qt/qtsvg/+/730501 a59d8014-47c4-4630-ab43-e1b13cbe58e3
https://codereview.qt-project.org/c/qt/qtsvg/+/730590 a59d8014-47c4-4630-ab43-e1b13cbe58e3
https://codereview.qt-project.org/c/qt/qtsvg/+/730591 a59d8014-47c4-4630-ab43-e1b13cbe58e3
https://codereview.qt-project.org/c/qt/qtsvg/+/730892 a59d8014-47c4-4630-ab43-e1b13cbe58e3
https://codereview.qt-project.org/c/qt/qtsvg/+/731257 a59d8014-47c4-4630-ab43-e1b13cbe58e3
https://codereview.qt-project.org/c/qt/qtsvg/+/733245 a59d8014-47c4-4630-ab43-e1b13cbe58e3
https://codereview.qt-project.org/c/qt/qtsvg/+/738811 a59d8014-47c4-4630-ab43-e1b13cbe58e3
https://codereview.qt-project.org/c/qt/qtsvg/+/743488 a59d8014-47c4-4630-ab43-e1b13cbe58e3
https://codereview.qt-project.org/c/qt/qtsvg/+/748966 a59d8014-47c4-4630-ab43-e1b13cbe58e3
https://codereview.qt-project.org/c/qt/qtsvg/+/756512 a59d8014-47c4-4630-ab43-e1b13cbe58e3
https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-8168: a59d8014-47c4-4630-ab43-e1b13cbe58e3

Data sources

NVD CVE API 2.0 — fetched 2026-10-27 07:03 UTC · record ↗

Learn the basics

Understanding CVEs and CVSS Scores