azure linux qtdeclarative vulnerabilities

Latest azure linux qtdeclarative CVEs

Newest publication first

1. CVE-2026-79616 Out-of-bounds read vulnerability in Context2D.path and PathSvg.path properties impacts Qt Quick

   Published 2026-09-23

   Low·CVSS 0.6 EPSS 0.15%

   Out-of-bounds read while parsing untrusted SVG path strings in Qt Quick's Context2D.path / PathSvg.path.

2. CVE-2025-12385 Improper validation of <img> tag size in Text component parser

   Published 2025-12-03

   High·CVSS 8.7 EPSS 0.34%

   Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation. This issue affects users of the Text component...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.