BaselineWatch
Desk

CVE-2026-8168

7.1 high SSVC exploitation: none Published

Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module (QtSvg) in Qt Group Qt allows attackers to cause a denial of service (application crash via stack exhaustion) via a crafted SVG file with deeply nested elements.

Fix

Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.

Change history 3

  1. StatusAwaiting Analysis → PublishedNVD modified 2026-10-19 14:27
  2. StatusReceived → Awaiting AnalysisNVD modified 2026-10-19 21:13
  3. First seenCVSS 7.1NVD modified 2026-10-19 15:17

Affected (CPE criteria) 0

NVD has not attached CPE configurations yet.

References 11