Skip to content
fr Sign in
9.4 Critical

CVE-2025-10729 The module will parse a <pattern> node which is not a child of a structural node

Description

The module will parse a <pattern> node which is not a child of a structural node. The node will be deleted after creation but might be accessed later leading to a use after free.

Affected products and versions

Product Affected versions Fixed in
Qt 6.9 6.9.0 → 6.9.2 No fix stated
Qt 6.7 6.7.0 → 6.8.4 No fix stated
Qt 6.9 6.9.0 → 6.9.2 No fix stated
Qt 6.7 6.7.0 → 6.8.4 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Qt

The 13 CVEs of Qt →
CVE-2025-14575 An Uncontrolled Search Path Element vulnerability in the OpenSSL TLS backend of Qt Network (qtbase) in Qt Qt Framework… 1.8 Low CVE-2026-6210 A type confusion vulnerability in Qt SVG allows an attacker to cause an application crash via a crafted SVG image 8.7 High CVE-2025-14576 Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading… 7.4 High CVE-2025-12385 Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability… 8.7 High
Track this CVE