When the module renders a Svg file that contains a <pattern> element, it might end up rendering it recursively leading to stack overflow DoS
The SVG rendering module in Qt, when processing a <pattern> element, can recursively call itself multiple times. There is no appropriate protection limiting the depth of this recursion (CWE-674 — uncontrolled recursion). As a result, the call stack overflows, causing the application process to terminate abnormally.
An attacker can cause a crash of any application using the Qt SVG module to render files, resulting in denial of service (DoS). High impact on confidentiality, integrity, and availability in both the context of the process itself and the system indicates the possibility of broader consequences than just service unavailability.
Patches available from the vendor should be applied according to references — fix available for review at: https://codereview.qt-project.org/c/qt/qtsvg/+/654200. Until the patch is deployed, it is recommended to avoid rendering untrusted SVG files using Qt SVG components.
Qt SVG components (qtsvg module) — specific versions indicated in vendor references (patch available in Qt Code Review repository).
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:X/R:X/V:X/RE:H/U:Red