CVE-2025-10729: Qt

Critical severity, CVSS 9.4. EPSS: 0.2% chance of exploitation in the next 30 days.

The module will parse a <pattern> node which is not a child of a structural node. The node will be deleted after creation but might be accessed later leading to a use after free.

Affected products

• Qt Qt: from 6.7.0, up to and including 6.8.4; from 6.9.0, up to and including 6.9.2

Published 2025-10-03. Last modified 2026-10-08.