Advisoriesby IbisQt Group PlcCVE-2026-105923
Qt: integer overflow
Fix: upgrade to 6.8.9 or later (2 fixed versions below)
A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Qt Product | >= 6.8.0, < 6.8.9 | 6.8.9 |
| >= 6.9.0, < 6.11.3 | 6.11.3 |