CVE-2026-79616: Qt

Low severity, CVSS 0.6. EPSS: 0.1% chance of exploitation in the next 30 days.

Out-of-bounds read while parsing untrusted SVG path strings in Qt Quick's Context2D.path / PathSvg.path.

Affected products

• Qt Qt: from 5.10.0, up to and including 6.8.8; from 6.9.0, up to and including 6.11.1

Published 2026-09-23. Last modified 2026-09-24.