{"id":"AZL-110127","summary":"CVE-2026-8168 affecting package qtsvg 6.6.1-3","details":"Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module (QtSvg) in Qt Group Qt allows attackers to cause a denial of service (application crash via stack exhaustion) via a crafted SVG file with deeply nested elements.","modified":"2026-10-23T14:16:33.483177861Z","published":"2026-10-19T14:17:08Z","upstream":["CVE-2026-8168"],"references":[{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-8168"}],"affected":[{"package":{"name":"qtsvg","ecosystem":"Azure Linux:3","purl":"pkg:rpm/azure-linux/qtsvg"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"6.6.1-3"}]}],"database_specific":{"source":"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-110127.json"}}],"schema_version":"1.9.0"}