Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 15

Export CSV
CVE-2026-103645

Integer overflow vulnerability in QTextCodec fromUnicode() and toUnicode() impacts Qt

An integer overflow vulnerability in the Qt QTextCodec fromUnicode() and toUnicode() functionality of the Qt 5 Core Compatibility APIs module (Qt 6) and the Qt Core module (Qt 5). Only builds where Qt is compiled with ICU support are affected.

CVSS 4.0 · 1.1 Low EPSS n/a KEV · Not listed
Vendors
Qt
Products
Qt Qt5compat Qtbase
CVE-2026-82292

NULL pointer dereference vulnerability in QDomDocument::setContent() XML parsing impacts Qt

A NULL pointer dereference vulnerability in the Qt Framework QDomDocument::setContent() XML parsing path of the Qt XML module (qtbase).

CVSS 4.0 · 1.9 Low EPSS < 1% KEV · Not listed
Vendors
Qt
Products
Qt Qt Framework Qtbase
CVE-2026-97845

Uncontrolled recursion vulnerability in QXmlSimpleReader XML parsing impacts Qt

An uncontrolled recursion vulnerability has been discovered in the Qt QXmlSimpleReader XML parsing functionality of the Qt 5 Core Compatibility APIs module (Qt 6) and the Qt XML module (Qt 5).

CVSS 4.0 · 4.3 Medium EPSS n/a KEV · Not listed
Vendors
Qt
Products
Qt Qt5compat Qtbase
CVE-2026-107479

Integer truncation vulnerability in QTextCodec conversion functions impacts Qt Framework

An integer truncation vulnerability in the QTextCodec conversion functions of the Qt 5 Core Compatibility APIs module impacts the Qt Framework. An application using the affected functionality could crash.

CVSS 4.0 · 1.7 Low EPSS < 1% KEV · Not listed
Vendors
Qt
Products
Qt Qt5compat Qtbase
CVE-2026-116337

Uncontrolled resource consumption vulnerability in HTTP response handling of Qt Network impacts Qt Framework

Uncontrolled resource consumption vulnerability in the Qt Framework HTTP response handling functionality of the Qt Network module.

CVSS 4.0 · 0.6 Low EPSS < 1% KEV · Not listed
Vendors
Qt
Products
Qt Qt Framework Qtbase
CVE-2026-107590

Out-of-bounds write vulnerability in QTextCodec iconv-based encoding impacts Qt

An out-of-bounds write vulnerability in the Qt QTextCodec iconv-based encoding of the Qt 5 Compatibility APIs module (Qt Core in Qt 5 and earlier) impacts Qt. Under certain conditions, encoding text with QTextCodec may write outside an internal buffer. This can cause the application to crash and may affect data integrity.

CVSS 4.0 · 1.9 Low EPSS < 1% KEV · Not listed
Vendors
Qt
Products
Qt Qt5compat Qtbase
CVE-2026-107472

Out-of-bounds read vulnerability in QTextCodec TSCII encoding impacts Qt

An out-of-bounds read vulnerability in the QTextCodec TSCII encoding of the Qt 5 Compatibility APIs module (Qt Core in Qt 5 and earlier) impacts Qt. Applications that convert text to the TSCII encoding through QTextCodec may read memory outside the input buffer, which can cause the application to crash or misinterpret the data.

CVSS 4.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Qt
Products
Qt Qt5compat Qtbase
CVE-2026-105946

Out-of-bounds read vulnerability in NTLM authentication handling impacts Qt

Out-of-bounds read in the QAuthenticator NTLM authentication handling in the Qt Network module in Qt Group Qt allows remote attackers to obtain sensitive information (heap memory contents) or cause a denial of service (application crash) via a crafted NTLM challenge sent by a malicious server or proxy, when an application using QNetworkAccessManager or QTcpSocket authenticates with NTLM.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Qt
Products
Qt Qtbase
CVE-2026-105924

NULL pointer dereference vulnerability in QCborValue to JSON conversion impacts Qt

A NULL pointer dereference vulnerability in the Qt QCborValue to JSON conversion of the Qt Core module.

CVSS 4.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Qt
Products
Qt Qtbase
CVE-2026-105923

Null-pointer dereference in QTriangulator reachable through VectorImage

A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type.

CVSS 4.0 · 4 Medium EPSS < 1% KEV · Not listed
Vendors
Qt
Products
Qt Qtbase
CVE-2026-107157

Out-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt Framework

Specially crafted CBOR input passed to QCborValue::fromCbor() in Qt Core can cause an out-of-bounds read, which may crash the application and could expose information.

CVSS 4.0 · 2 Low EPSS < 1% KEV · Not listed
Vendors
Qt
Products
Qt Qtbase
CVE-2026-96432

Null pointer dereference vulnerability in QNetworkAccessManager impacts Qt

A malicious or compromised HTTP/2 server withholding SETTINGS ACK can send RST_STREAM on a completed stream, planting a null pointer, and then send a PUSH_PROMISE for that stream, causing a null pointer dereference in the QNetworkAccessManager class of the Qt Network module that crashes the application.

CVSS 4.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Qt
Products
Qt Qtbase
CVE-2026-16762

Denial-of-service vulnerability in the Qt Core QXmlStream parser (QXmlStreamReader) impacts Qt

An attacker able to supply a crafted XML document to an application using QXmlStreamReader can cause disproportionate CPU consumption during parsing, making the application unresponsive (denial of service). Exploitation requires only that the application parse attacker-influenced XML; no authentication, privileges, or user interaction beyond ingesting the input are needed. There is no loss of confidentiality or integrity — no data disclosure, data modification, or code execution — and the impact is contained to the affected process.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Qt
Products
Qt Qtbase
CVE-2026-101201

QBinaryJson::fromBinaryData() integer overflow leading to OOB read

A malformed header in the binary file fed to QBinaryJson::fromBinaryData() can cause undefined behaviour because of out-of-bounds read.

CVSS 4.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Qt
Products
Qt Qt5compat Qtbase
CVE-2019-18281

qt5-qtbase: Out-of-bounds access in generateDirectionalRuns() function in qtextengine.cpp

An out-of-bounds memory access in the generateDirectionalRuns() function in qtextengine.cpp in Qt qtbase 5.11.x and 5.12.x before 5.12.5 allows attackers to cause a denial of service by crashing an application via a text file containing many directional characters.

CVSS 3.1 · 4.3 Medium EPSS 1.8% KEV · Not listed
Vendors
Debian Qt Redhat
Products
Debian Linux Qtbase Enterprise Linux