CVE-2026-105923

Description

A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type.

References

• https://codereview.qt-project.org/c/qt%2Fqtbase/+/762279
• https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products