CVE-2026-79616: Out-of-bounds read vulnerability in Context2D.path and PathSvg.path properties impacts Qt Quick
Published Sep 23, 2026
·Updated
Out-of-bounds read vulnerability in Context2D.path and PathSvg.path properties impacts Qt Quick
Other sources
Out-of-bounds read while parsing untrusted SVG path strings in Qt Quick's Context2D.path / PathSvg.path.
— MITRE
Affected Software
2 affected componentsFixes available
Qt Qt Quick
Microsoft azl3 qtdeclarative 6.6.1-2<6.6.1-3
6.6.1-3
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.1-3
Event History
Sep 23, 2026
CVE Published
via MITRE·09:51 AM
Data Sourced
via MITRE·09:51 AM
DescriptionWeakness
Data Sourced
via NVD·10:17 AM
DescriptionSeverityWeakness
Oct 9, 2026
Data Sourced
via Microsoft·08:45 AM
DescriptionSeverityWeaknessAffected Software