{"id":"UBUNTU-CVE-2026-79616","details":"Out-of-bounds read while parsing untrusted SVG path strings in Qt Quick's Context2D.path / PathSvg.path.","modified":"2026-09-25T06:36:57.747037686Z","published":"2026-09-24T00:00:00Z","upstream":["CVE-2026-79616"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-79616"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2026-79616"},{"type":"REPORT","url":"https://codereview.qt-project.org/c/qt/qtdeclarative/+/754718"}],"affected":[{"package":{"name":"qt6-declarative","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/qt6-declarative?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.2+dfsg-4ubuntu1","6.2.4+dfsg-2ubuntu1","6.2.4+dfsg-3ubuntu1"],"ecosystem_specific":{"binaries":[{"binary_name":"libqt6labsanimation6","binary_version":"6.2.4+dfsg-3ubuntu1"},{"binary_name":"libqt6labsfolderlistmodel6","binary_version":"6.2.4+dfsg-3ubuntu1"},{"binary_name":"libqt6labsqmlmodels6","binary_version":"6.2.4+dfsg-3ubuntu1"},{"binary_version":"6.2.4+dfsg-3ubuntu1","binary_name":"libqt6labssettings6"},{"binary_name":"libqt6labssharedimage6","binary_version":"6.2.4+dfsg-3ubuntu1"},{"binary_name":"libqt6labswavefrontmesh6","binary_version":"6.2.4+dfsg-3ubuntu1"},{"binary_version":"6.2.4+dfsg-3ubuntu1","binary_name":"libqt6qml6"},{"binary_version":"6.2.4+dfsg-3ubuntu1","binary_name":"libqt6qmlcore6"},{"binary_version":"6.2.4+dfsg-3ubuntu1","binary_name":"libqt6qmllocalstorage6"},{"binary_version":"6.2.4+dfsg-3ubuntu1","binary_name":"libqt6qmlmodels6"},{"binary_version":"6.2.4+dfsg-3ubuntu1","binary_name":"libqt6qmlworkerscript6"},{"binary_name":"libqt6qmlxmllistmodel6","binary_version":"6.2.4+dfsg-3ubuntu1"},{"binary_name":"libqt6quick6","binary_version":"6.2.4+dfsg-3ubuntu1"},{"binary_version":"6.2.4+dfsg-3ubuntu1","binary_name":"libqt6quickcontrols2-6"},{"binary_name":"libqt6quickcontrols2impl6","binary_version":"6.2.4+dfsg-3ubuntu1"},{"binary_name":"libqt6quickdialogs2-6","binary_version":"6.2.4+dfsg-3ubuntu1"},{"binary_name":"libqt6quickdialogs2quickimpl6","binary_version":"6.2.4+dfsg-3ubuntu1"},{"binary_name":"libqt6quickdialogs2utils6","binary_version":"6.2.4+dfsg-3ubuntu1"},{"binary_version":"6.2.4+dfsg-3ubuntu1","binary_name":"libqt6quicklayouts6"},{"binary_version":"6.2.4+dfsg-3ubuntu1","binary_name":"libqt6quickparticles6"},{"binary_version":"6.2.4+dfsg-3ubuntu1","binary_name":"libqt6quickshapes6"},{"binary_name":"libqt6quicktemplates2-6","binary_version":"6.2.4+dfsg-3ubuntu1"},{"binary_name":"libqt6quicktest6","binary_version":"6.2.4+dfsg-3ubuntu1"},{"binary_version":"6.2.4+dfsg-3ubuntu1","binary_name":"libqt6quickwidgets6"},{"binary_name":"qml-qt6","binary_version":"6.2.4+dfsg-3ubuntu1"},{"binary_version":"6.2.4+dfsg-3ubuntu1","binary_name":"qml6-module-qt-labs-animation"},{"binary_name":"qml6-module-qt-labs-folderlistmodel","binary_version":"6.2.4+dfsg-3ubuntu1"},{"binary_name":"qml6-module-qt-labs-platform","binary_version":"6.2.4+dfsg-3ubuntu1"},{"binary_name":"qml6-module-qt-labs-qmlmodels","binary_version":"6.2.4+dfsg-3ubuntu1"},{"binary_name":"qml6-module-qt-labs-settings","binary_version":"6.2.4+dfsg-3ubuntu1"},{"binary_name":"qml6-module-qt-labs-sharedimage","binary_version":"6.2.4+dfsg-3ubuntu1"},{"binary_version":"6.2.4+dfsg-3ubuntu1","binary_name":"qml6-module-qt-labs-wavefrontmesh"},{"binary_name":"qml6-module-qtcore","binary_version":"6.2.4+dfsg-3ubuntu1"},{"binary_name":"qml6-module-qtqml","binary_version":"6.2.4+dfsg-3ubuntu1"},{"binary_version":"6.2.4+dfsg-3ubuntu1","binary_name":"qml6-module-qtqml-models"},{"binary_name":"qml6-module-qtqml-workerscript","binary_version":"6.2.4+dfsg-3ubuntu1"},{"binary_name":"qml6-module-qtqml-xmllistmodel","binary_version":"6.2.4+dfsg-3ubuntu1"},{"binary_version":"6.2.4+dfsg-3ubuntu1","binary_name":"qml6-module-qtquick"},{"binary_version":"6.2.4+dfsg-3ubuntu1","binary_name":"qml6-module-qtquick-controls"},{"binary_name":"qml6-module-qtquick-dialogs","binary_version":"6.2.4+dfsg-3ubuntu1"},{"binary_version":"6.2.4+dfsg-3ubuntu1","binary_name":"qml6-module-qtquick-layouts"},{"binary_version":"6.2.4+dfsg-3ubuntu1","binary_name":"qml6-module-qtquick-localstorage"},{"binary_version":"6.2.4+dfsg-3ubuntu1","binary_name":"qml6-module-qtquick-nativestyle"},{"binary_version":"6.2.4+dfsg-3ubuntu1","binary_name":"qml6-module-qtquick-particles"},{"binary_name":"qml6-module-qtquick-shapes","binary_version":"6.2.4+dfsg-3ubuntu1"},{"binary_name":"qml6-module-qtquick-templates","binary_version":"6.2.4+dfsg-3ubuntu1"},{"binary_name":"qml6-module-qtquick-tooling","binary_version":"6.2.4+dfsg-3ubuntu1"},{"binary_name":"qml6-module-qtquick-window","binary_version":"6.2.4+dfsg-3ubuntu1"},{"binary_name":"qml6-module-qttest","binary_version":"6.2.4+dfsg-3ubuntu1"},{"binary_version":"6.2.4+dfsg-3ubuntu1","binary_name":"qmlscene-qt6"},{"binary_name":"qt6-declarative-dev-tools","binary_version":"6.2.4+dfsg-3ubuntu1"},{"binary_name":"qt6-qmltooling-plugins","binary_version":"6.2.4+dfsg-3ubuntu1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-79616.json"}},{"package":{"name":"qt6-declarative","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/qt6-declarative?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.4.2+dfsg-3","6.4.2+dfsg-4","6.4.2+dfsg-4build1","6.4.2+dfsg-4build2","6.4.2+dfsg-4build3"],"ecosystem_specific":{"binaries":[{"binary_name":"libqt6labsanimation6","binary_version":"6.4.2+dfsg-4build3"},{"binary_name":"libqt6labsfolderlistmodel6","binary_version":"6.4.2+dfsg-4build3"},{"binary_version":"6.4.2+dfsg-4build3","binary_name":"libqt6labsqmlmodels6"},{"binary_version":"6.4.2+dfsg-4build3","binary_name":"libqt6labssettings6"},{"binary_name":"libqt6labssharedimage6","binary_version":"6.4.2+dfsg-4build3"},{"binary_version":"6.4.2+dfsg-4build3","binary_name":"libqt6labswavefrontmesh6"},{"binary_name":"libqt6qml6","binary_version":"6.4.2+dfsg-4build3"},{"binary_name":"libqt6qmlcompiler6","binary_version":"6.4.2+dfsg-4build3"},{"binary_version":"6.4.2+dfsg-4build3","binary_name":"libqt6qmlcore6"},{"binary_version":"6.4.2+dfsg-4build3","binary_name":"libqt6qmllocalstorage6"},{"binary_name":"libqt6qmlmodels6","binary_version":"6.4.2+dfsg-4build3"},{"binary_name":"libqt6qmlworkerscript6","binary_version":"6.4.2+dfsg-4build3"},{"binary_name":"libqt6qmlxmllistmodel6","binary_version":"6.4.2+dfsg-4build3"},{"binary_name":"libqt6quick6","binary_version":"6.4.2+dfsg-4build3"},{"binary_version":"6.4.2+dfsg-4build3","binary_name":"libqt6quickcontrols2-6"},{"binary_version":"6.4.2+dfsg-4build3","binary_name":"libqt6quickcontrols2impl6"},{"binary_version":"6.4.2+dfsg-4build3","binary_name":"libqt6quickdialogs2-6"},{"binary_name":"libqt6quickdialogs2quickimpl6","binary_version":"6.4.2+dfsg-4build3"},{"binary_version":"6.4.2+dfsg-4build3","binary_name":"libqt6quickdialogs2utils6"},{"binary_version":"6.4.2+dfsg-4build3","binary_name":"libqt6quicklayouts6"},{"binary_name":"libqt6quickparticles6","binary_version":"6.4.2+dfsg-4build3"},{"binary_version":"6.4.2+dfsg-4build3","binary_name":"libqt6quickshapes6"},{"binary_name":"libqt6quicktemplates2-6","binary_version":"6.4.2+dfsg-4build3"},{"binary_name":"libqt6quicktest6","binary_version":"6.4.2+dfsg-4build3"},{"binary_version":"6.4.2+dfsg-4build3","binary_name":"libqt6quickwidgets6"},{"binary_version":"6.4.2+dfsg-4build3","binary_name":"qml-qt6"},{"binary_name":"qml6-module-qt-labs-animation","binary_version":"6.4.2+dfsg-4build3"},{"binary_name":"qml6-module-qt-labs-folderlistmodel","binary_version":"6.4.2+dfsg-4build3"},{"binary_version":"6.4.2+dfsg-4build3","binary_name":"qml6-module-qt-labs-platform"},{"binary_version":"6.4.2+dfsg-4build3","binary_name":"qml6-module-qt-labs-qmlmodels"},{"binary_name":"qml6-module-qt-labs-settings","binary_version":"6.4.2+dfsg-4build3"},{"binary_name":"qml6-module-qt-labs-sharedimage","binary_version":"6.4.2+dfsg-4build3"},{"binary_name":"qml6-module-qt-labs-wavefrontmesh","binary_version":"6.4.2+dfsg-4build3"},{"binary_name":"qml6-module-qtcore","binary_version":"6.4.2+dfsg-4build3"},{"binary_name":"qml6-module-qtqml","binary_version":"6.4.2+dfsg-4build3"},{"binary_name":"qml6-module-qtqml-models","binary_version":"6.4.2+dfsg-4build3"},{"binary_version":"6.4.2+dfsg-4build3","binary_name":"qml6-module-qtqml-workerscript"},{"binary_name":"qml6-module-qtqml-xmllistmodel","binary_version":"6.4.2+dfsg-4build3"},{"binary_name":"qml6-module-qtquick","binary_version":"6.4.2+dfsg-4build3"},{"binary_name":"qml6-module-qtquick-controls","binary_version":"6.4.2+dfsg-4build3"},{"binary_version":"6.4.2+dfsg-4build3","binary_name":"qml6-module-qtquick-dialogs"},{"binary_name":"qml6-module-qtquick-layouts","binary_version":"6.4.2+dfsg-4build3"},{"binary_version":"6.4.2+dfsg-4build3","binary_name":"qml6-module-qtquick-localstorage"},{"binary_version":"6.4.2+dfsg-4build3","binary_name":"qml6-module-qtquick-nativestyle"},{"binary_version":"6.4.2+dfsg-4build3","binary_name":"qml6-module-qtquick-particles"},{"binary_version":"6.4.2+dfsg-4build3","binary_name":"qml6-module-qtquick-shapes"},{"binary_name":"qml6-module-qtquick-templates","binary_version":"6.4.2+dfsg-4build3"},{"binary_name":"qml6-module-qtquick-tooling","binary_version":"6.4.2+dfsg-4build3"},{"binary_version":"6.4.2+dfsg-4build3","binary_name":"qml6-module-qtquick-window"},{"binary_name":"qml6-module-qttest","binary_version":"6.4.2+dfsg-4build3"},{"binary_name":"qmlscene-qt6","binary_version":"6.4.2+dfsg-4build3"},{"binary_name":"qt6-declarative-dev-tools","binary_version":"6.4.2+dfsg-4build3"},{"binary_name":"qt6-declarative-doc-html","binary_version":"6.4.2+dfsg-4build3"},{"binary_name":"qt6-declarative-examples","binary_version":"6.4.2+dfsg-4build3"},{"binary_version":"6.4.2+dfsg-4build3","binary_name":"qt6-qmllint-plugins"},{"binary_name":"qt6-qmltooling-plugins","binary_version":"6.4.2+dfsg-4build3"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-79616.json"}},{"package":{"name":"qt6-declarative","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/qt6-declarative?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.9.2+dfsg-1","6.9.2+dfsg-5","6.10.2+dfsg-3"],"ecosystem_specific":{"binaries":[{"binary_version":"6.10.2+dfsg-3","binary_name":"libqt6labsplatform6"},{"binary_version":"6.10.2+dfsg-3","binary_name":"libqt6labssynchronizer6"},{"binary_name":"libqt6qml6","binary_version":"6.10.2+dfsg-3"},{"binary_name":"libqt6qmlcompiler6","binary_version":"6.10.2+dfsg-3"},{"binary_name":"libqt6qmlmeta6","binary_version":"6.10.2+dfsg-3"},{"binary_name":"libqt6qmlmodels6","binary_version":"6.10.2+dfsg-3"},{"binary_version":"6.10.2+dfsg-3","binary_name":"libqt6qmlnetwork6"},{"binary_version":"6.10.2+dfsg-3","binary_name":"libqt6qmlworkerscript6"},{"binary_name":"libqt6quick6","binary_version":"6.10.2+dfsg-3"},{"binary_version":"6.10.2+dfsg-3","binary_name":"libqt6quickcontrols2-6"},{"binary_name":"libqt6quickshapes6","binary_version":"6.10.2+dfsg-3"},{"binary_name":"libqt6quickshapesdesignhelpers6","binary_version":"6.10.2+dfsg-3"},{"binary_version":"6.10.2+dfsg-3","binary_name":"libqt6quicktemplates2-6"},{"binary_name":"libqt6quicktest6","binary_version":"6.10.2+dfsg-3"},{"binary_version":"6.10.2+dfsg-3","binary_name":"libqt6quickvectorimage6"},{"binary_version":"6.10.2+dfsg-3","binary_name":"libqt6quickvectorimagegenerator6"},{"binary_name":"libqt6quickvectorimagehelpers6","binary_version":"6.10.2+dfsg-3"},{"binary_name":"libqt6quickwidgets6","binary_version":"6.10.2+dfsg-3"},{"binary_name":"qml-qt6","binary_version":"6.10.2+dfsg-3"},{"binary_name":"qml6-module-qml","binary_version":"6.10.2+dfsg-3"},{"binary_name":"qml6-module-qmltime","binary_version":"6.10.2+dfsg-3"},{"binary_version":"6.10.2+dfsg-3","binary_name":"qml6-module-qt-labs-animation"},{"binary_name":"qml6-module-qt-labs-assetdownloader","binary_version":"6.10.2+dfsg-3"},{"binary_version":"6.10.2+dfsg-3","binary_name":"qml6-module-qt-labs-folderlistmodel"},{"binary_version":"6.10.2+dfsg-3","binary_name":"qml6-module-qt-labs-platform"},{"binary_name":"qml6-module-qt-labs-qmlmodels","binary_version":"6.10.2+dfsg-3"},{"binary_name":"qml6-module-qt-labs-settings","binary_version":"6.10.2+dfsg-3"},{"binary_name":"qml6-module-qt-labs-sharedimage","binary_version":"6.10.2+dfsg-3"},{"binary_version":"6.10.2+dfsg-3","binary_name":"qml6-module-qt-labs-synchronizer"},{"binary_version":"6.10.2+dfsg-3","binary_name":"qml6-module-qt-labs-wavefrontmesh"},{"binary_name":"qml6-module-qtcore","binary_version":"6.10.2+dfsg-3"},{"binary_name":"qml6-module-qtnetwork","binary_version":"6.10.2+dfsg-3"},{"binary_name":"qml6-module-qtqml","binary_version":"6.10.2+dfsg-3"},{"binary_name":"qml6-module-qtqml-models","binary_version":"6.10.2+dfsg-3"},{"binary_name":"qml6-module-qtqml-workerscript","binary_version":"6.10.2+dfsg-3"},{"binary_version":"6.10.2+dfsg-3","binary_name":"qml6-module-qtqml-xmllistmodel"},{"binary_name":"qml6-module-qtquick","binary_version":"6.10.2+dfsg-3"},{"binary_name":"qml6-module-qtquick-controls","binary_version":"6.10.2+dfsg-3"},{"binary_name":"qml6-module-qtquick-dialogs","binary_version":"6.10.2+dfsg-3"},{"binary_version":"6.10.2+dfsg-3","binary_name":"qml6-module-qtquick-effects"},{"binary_name":"qml6-module-qtquick-layouts","binary_version":"6.10.2+dfsg-3"},{"binary_version":"6.10.2+dfsg-3","binary_name":"qml6-module-qtquick-localstorage"},{"binary_name":"qml6-module-qtquick-particles","binary_version":"6.10.2+dfsg-3"},{"binary_name":"qml6-module-qtquick-shapes","binary_version":"6.10.2+dfsg-3"},{"binary_version":"6.10.2+dfsg-3","binary_name":"qml6-module-qtquick-shapes-designhelpers"},{"binary_name":"qml6-module-qtquick-templates","binary_version":"6.10.2+dfsg-3"},{"binary_version":"6.10.2+dfsg-3","binary_name":"qml6-module-qtquick-tooling"},{"binary_name":"qml6-module-qtquick-vectorimage","binary_version":"6.10.2+dfsg-3"},{"binary_name":"qml6-module-qtquick-vectorimage-helpers","binary_version":"6.10.2+dfsg-3"},{"binary_version":"6.10.2+dfsg-3","binary_name":"qml6-module-qtquick-window"},{"binary_name":"qml6-module-qttest","binary_version":"6.10.2+dfsg-3"},{"binary_name":"qmlscene-qt6","binary_version":"6.10.2+dfsg-3"},{"binary_version":"6.10.2+dfsg-3","binary_name":"qt6-declarative-dev-tools"},{"binary_version":"6.10.2+dfsg-3","binary_name":"qt6-declarative-doc-html"},{"binary_name":"qt6-declarative-examples","binary_version":"6.10.2+dfsg-3"},{"binary_name":"qt6-qmllint-plugins","binary_version":"6.10.2+dfsg-3"},{"binary_name":"qt6-qmlls-plugins","binary_version":"6.10.2+dfsg-3"},{"binary_version":"6.10.2+dfsg-3","binary_name":"qt6-qmltooling-plugins"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-79616.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/R:U/RE:L/U:Green"},{"type":"Ubuntu","score":"medium"}]}