Live › vulnerability › CVE-2026-105923
Go to dashboardA crafted SVG file can trigger an integer overflow that leads to a null-pointer dereference in the VectorImage QML type. The sources do not say whether this gives code execution or only a crash.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type.
This page as .md · .json · in your agent: get_signal("CVE-2026-105923")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.