Linuxsecurity

Gentoo: High Risk Arbitrary Code Execution Vulnerabilities in qtsvg and UDisks

First seen 2 Dec 2025, 18:33 UTC • Linuxsecurity

•37.4

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Multiple vulnerabilities have been identified in qtsvg and UDisks, affecting users of these packages. Users are advised to upgrade to the latest versions to mitigate risks associated with these vulnerabilities, which include CVE-2023-45872, CVE-2025-10728, CVE-2025-10729 for qtsvg and CVE-2021-3802, CVE-2025-8067 for UDisks.

How this analysis works

Attack Flow

11 entities, 16 inferred relationships (STIX 2.1).

Technique (2)

Arbitrary Code Execution
Zero-day Exploit

Organization (1)

Gentoo Linux

Vulnerability (5)

CVE-2021-3802
CVE-2023-45872
CVE-2025-10728
CVE-2025-10729
CVE-2025-8067

Indicator (1)

gentoo.org

Affected Platform (2)

Qt Framework
Qtsvg

Relationships

CVE-2021-3802 targets Qt Framework
CVE-2021-3802 targets Qtsvg
CVE-2023-45872 targets Qt Framework
CVE-2023-45872 targets Qtsvg
CVE-2025-10728 targets Qt Framework
CVE-2025-10728 targets Qtsvg
CVE-2025-10729 targets Qt Framework
CVE-2025-10729 targets Qtsvg
CVE-2025-8067 targets Qt Framework
CVE-2025-8067 targets Qtsvg
Arbitrary Code Execution targets Qt Framework
Arbitrary Code Execution targets Qtsvg
Zero-day Exploit targets Qt Framework
Zero-day Exploit targets Qtsvg
CVE-2021-3802 related to Gentoo Linux
CVE-2021-3802 related to gentoo.org

Continue Reading

Mageia 10 Security Vulnerabilities Lead to Denial of Service Risks Gentoo: High Risk Arbitrary Code Execution Vulnerabilities in qtsvg and UDisks

Gentoo: High Risk Arbitrary Code Execution Vulnerabilities in qtsvg and UDisks

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading