# CVE-2025-10729: Use-after-free vulnerability in Qt SVG qsvghandler.cpp allows denial of service via crafted SVG

CVE-2025-10729 is fixed in 5 products on 1 platform, first by RHSA-2025:21037, released October 3, 2025. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2025-10729
- Priority: High
- CVSS: 9.3 (Important)
- EPSS: 0.0022
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Oct 3, 2025
- Weakness: Use After Free
- Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-10729

## Description

The module will parse a <pattern> node which is not a child of a structural node. The node will be deleted after creation but might be accessed later leading to a use after free.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | qt6-qtsvg RHEL 10 | 6.9.1-2.el10_1.1 | [RHSA-2025:21037](https://patchblox.com/security/data/fix/linux/rhsa-2025-21037.md) | Oct 3, 2025 |
| Linux | qt6-qtsvg almalinux 10 | 6.8.1-1.el10_0.1 | [ALSA-2025:19772](https://patchblox.com/security/data/fix/linux/alsa-2025-19772.md) | Nov 5, 2025 |
| Linux | qt6-qtsvg ol 10 | 0:6.8.1-1.el10_0.1 | [ELSA-2025-19772](https://patchblox.com/security/data/fix/linux/elsa-2025-19772.md) | Nov 5, 2025 |
| Linux | qt6-qtsvg rocky 10 | 0:6.9.1-2.el10_1.1 | [RLSA-2025:21037](https://patchblox.com/security/data/fix/linux/rlsa-2025-21037.md) | Nov 21, 2025 |
| Linux | qt6-qtsvg-devel almalinux 10 | 6.8.1-1.el10_0.1 | [ALSA-2025:19772](https://patchblox.com/security/data/fix/linux/alsa-2025-19772.md) | Nov 5, 2025 |
| Linux | qt6-qtsvg-devel ol 10 | 0:6.8.1-1.el10_0.1 | [ELSA-2025-19772](https://patchblox.com/security/data/fix/linux/elsa-2025-19772.md) | Nov 5, 2025 |
| Linux | qt6-qtsvg-examples almalinux 10 | 6.8.1-1.el10_0.1 | [ALSA-2025:19772](https://patchblox.com/security/data/fix/linux/alsa-2025-19772.md) | Nov 5, 2025 |
| Linux | qt6-qtsvg-examples ol 10 | 0:6.8.1-1.el10_0.1 | [ELSA-2025-19772](https://patchblox.com/security/data/fix/linux/elsa-2025-19772.md) | Nov 5, 2025 |
| Linux | qt6-svg Debian 14 | 6.10.2-5 | [DEBIAN-CVE-2025-10729](https://patchblox.com/security/data/fix/linux/debian-cve-2025-10729.md) | Oct 3, 2025 |
| Linux | qt6-svg opensuse-leap 16.0 | 6.9.1-160000.3.1 | [OPENSUSE-SU-2026:21626-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21626-1.md) | Aug 24, 2026 |
| Linux | qt6-svg sles 16.0 | 6.9.1-160000.3.1 | [SUSE-SU-2026:23305-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-23305-1.md) | Aug 24, 2026 |
| Linux | qt6-svg-docs opensuse-leap 16.0 | 6.9.1-160000.3.1 | [OPENSUSE-SU-2026:21626-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21626-1.md) | Aug 24, 2026 |
| Linux | qt6-svg-docs sles 16.0 | 6.9.1-160000.3.1 | [SUSE-SU-2026:23305-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-23305-1.md) | Aug 24, 2026 |

---

Data as of 2026-11-09T01:18:40Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.