CVE-2015-9541: Fedoraproject Fedora

High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days.

Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that is mishandled in QXmlStreamReader, a related issue to CVE-2003-1564.

Affected products

• Fedoraproject Fedora: version 31 only; version 32 only
• Qt Qt: from 5.5.0, before 5.12.8 (fixed in 5.12.8)

Published 2020-01-24. Last modified 2026-06-17.