Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 113

Export CSV
CVE-2026-103645

Integer overflow vulnerability in QTextCodec fromUnicode() and toUnicode() impacts Qt

An integer overflow vulnerability in the Qt QTextCodec fromUnicode() and toUnicode() functionality of the Qt 5 Core Compatibility APIs module (Qt 6) and the Qt Core module (Qt 5). Only builds where Qt is compiled with ICU support are affected.

CVSS 4.0 · 1.1 Low EPSS n/a KEV · Not listed
Vendors
Qt
Products
Qt Qt5compat Qtbase
CVE-2026-82292

NULL pointer dereference vulnerability in QDomDocument::setContent() XML parsing impacts Qt

A NULL pointer dereference vulnerability in the Qt Framework QDomDocument::setContent() XML parsing path of the Qt XML module (qtbase).

CVSS 4.0 · 1.9 Low EPSS < 1% KEV · Not listed
Vendors
Qt
Products
Qt Qt Framework Qtbase
CVE-2026-114369

Security Issue CVE-2026-114369 - Resource exhaustion (denial of service) vulnerability in the WebSocket handshake handling of QWebSocket and QWebSocketServer impacts Qt Framework

Resource exhaustion vulnerability in the Qt Framework QWebSocket and QWebSocketServer classes of the Qt WebSockets module

CVSS 4.0 · 2.7 Low EPSS n/a KEV · Not listed
Vendors
Qt
Products
Qt Qt Framework Qtwebsockets
CVE-2026-97845

Uncontrolled recursion vulnerability in QXmlSimpleReader XML parsing impacts Qt

An uncontrolled recursion vulnerability has been discovered in the Qt QXmlSimpleReader XML parsing functionality of the Qt 5 Core Compatibility APIs module (Qt 6) and the Qt XML module (Qt 5).

CVSS 4.0 · 4.3 Medium EPSS n/a KEV · Not listed
Vendors
Qt
Products
Qt Qt5compat Qtbase
CVE-2026-114366

Information disclosure vulnerability in authentication handling of QWebSocket impacts Qt Framework

An information disclosure vulnerability in the Qt Framework QWebSocket authentication handling of the Qt WebSockets module.

CVSS 4.0 · 2.3 Low EPSS < 1% KEV · Not listed
Vendors
Qt
Products
Qt Qt Framework Qtwebsockets
CVE-2026-111487

Out-of-bounds write vulnerability in the assimp scene import plugin of Qt3D impacts Qt Framework

An out-of-bounds write vulnerability in the Qt Framework assimp scene import plugin of the Qt3D module.

CVSS 4.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Qt
Products
Qt Qt3d Qt Framework
CVE-2026-110944

Resource exhaustion vulnerability in HTTP request handling impacts Qt HTTP Server (QHttpServer)

Resource exhaustion vulnerability in the HTTP request handling of the QHttpServer component of Qt HTTP Server.

CVSS 4.0 · 2.7 Low EPSS < 1% KEV · Not listed
Vendors
Qt
Products
Qt Qthttpserver
CVE-2026-107479

Integer truncation vulnerability in QTextCodec conversion functions impacts Qt Framework

An integer truncation vulnerability in the QTextCodec conversion functions of the Qt 5 Core Compatibility APIs module impacts the Qt Framework. An application using the affected functionality could crash.

CVSS 4.0 · 1.7 Low EPSS < 1% KEV · Not listed
Vendors
Qt
Products
Qt Qt5compat Qtbase
CVE-2026-116337

Uncontrolled resource consumption vulnerability in HTTP response handling of Qt Network impacts Qt Framework

Uncontrolled resource consumption vulnerability in the Qt Framework HTTP response handling functionality of the Qt Network module.

CVSS 4.0 · 0.6 Low EPSS < 1% KEV · Not listed
Vendors
Qt
Products
Qt Qt Framework Qtbase
CVE-2026-107590

Out-of-bounds write vulnerability in QTextCodec iconv-based encoding impacts Qt

An out-of-bounds write vulnerability in the Qt QTextCodec iconv-based encoding of the Qt 5 Compatibility APIs module (Qt Core in Qt 5 and earlier) impacts Qt. Under certain conditions, encoding text with QTextCodec may write outside an internal buffer. This can cause the application to crash and may affect data integrity.

CVSS 4.0 · 1.9 Low EPSS < 1% KEV · Not listed
Vendors
Qt
Products
Qt Qt5compat Qtbase
CVE-2026-107472

Out-of-bounds read vulnerability in QTextCodec TSCII encoding impacts Qt

An out-of-bounds read vulnerability in the QTextCodec TSCII encoding of the Qt 5 Compatibility APIs module (Qt Core in Qt 5 and earlier) impacts Qt. Applications that convert text to the TSCII encoding through QTextCodec may read memory outside the input buffer, which can cause the application to crash or misinterpret the data.

CVSS 4.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Qt
Products
Qt Qt5compat Qtbase
CVE-2026-105946

Out-of-bounds read vulnerability in NTLM authentication handling impacts Qt

Out-of-bounds read in the QAuthenticator NTLM authentication handling in the Qt Network module in Qt Group Qt allows remote attackers to obtain sensitive information (heap memory contents) or cause a denial of service (application crash) via a crafted NTLM challenge sent by a malicious server or proxy, when an application using QNetworkAccessManager or QTcpSocket authenticates with NTLM.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Qt
Products
Qt Qtbase
CVE-2026-103653

Out-of-bounds read vulnerability in CoAP message parsing impacts Qt CoAP

An out-of-bounds read vulnerability in the Qt CoAP message parsing (QCoapInternalReply::createFromFrame()) of the Qt CoAP module. Processing a malformed CoAP message can cause an application using Qt CoAP to crash (loss of availability) or to continue operating on incorrect data (potential loss of integrity).

CVSS 4.0 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Qt
Products
Qt Qtcoap
CVE-2026-107457

Memory corruption vulnerability in QMqttClient impacts Qt MQTT

A memory corruption vulnerability in the QMqttClient class of the Qt MQTT module. Under certain MQTT 5 connection settings between client and server, QMqttClient may corrupt memory, which can cause the application to crash.

CVSS 4.0 · 2.3 Low EPSS < 1% KEV · Not listed
Vendors
Qt
Products
Qt Qtmqtt
CVE-2021-38593

qt: out-of-bounds write in QOutlineMapper::convertPath called from QRasterPaintEngine::fill and QPaintEngineEx::stroke

Qt 5.x before 5.15.6 and 6.x through 6.1.2 has an out-of-bounds write in QOutlineMapper::convertPath (called from QRasterPaintEngine::fill and QPaintEngineEx::stroke).

CVSS 3.1 · 7.5 High EPSS 3.0% KEV · Not listed
Vendors
Fedoraproject Qt Redhat
Products
Fedora Qt Enterprise Linux
CVE-2026-100140

Integer overflow vulnerability in XML parsing functionality of Qt5Compat impacts Qt

An integer overflow vulnerability in the Qt XML parsing (Qt5Compat / QXmlSimpleReader) functionality of Qt.

CVSS 4.0 · 1.9 Low EPSS < 1% KEV · Not listed
Vendors
Qt
Products
Qt Qt5compat
CVE-2026-95620

Use-after-free vulnerability in QNetworkAccessManager HTTP/2 support impacts Qt

A use-after-free vulnerability in the Qt QNetworkAccessManager HTTP/2 client support of the Qt Network module allows a malicious or compromised HTTP/2 server to cause the client application to crash, affecting availability.

CVSS 4.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Qt
Products
Qt
CVE-2026-105924

NULL pointer dereference vulnerability in QCborValue to JSON conversion impacts Qt

A NULL pointer dereference vulnerability in the Qt QCborValue to JSON conversion of the Qt Core module.

CVSS 4.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Qt
Products
Qt Qtbase
CVE-2026-105923

Null-pointer dereference in QTriangulator reachable through VectorImage

A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type.

CVSS 4.0 · 4 Medium EPSS < 1% KEV · Not listed
Vendors
Qt
Products
Qt Qtbase
CVE-2026-107157

Out-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt Framework

Specially crafted CBOR input passed to QCborValue::fromCbor() in Qt Core can cause an out-of-bounds read, which may crash the application and could expose information.

CVSS 4.0 · 2 Low EPSS < 1% KEV · Not listed
Vendors
Qt
Products
Qt Qtbase