CVE-2026-100140

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-100140", "assignerOrgId": "a59d8014-47c4-4630-ab43-e1b13cbe58e3", "state": "PUBLISHED", "assignerShortName": "Qt", "dateReserved": "2026-09-25T11:26:30.758Z", "datePublished": "2026-11-02T11:44:37.391Z", "dateUpdated": "2026-11-02T16:55:00.571Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "a59d8014-47c4-4630-ab43-e1b13cbe58e3", "shortName": "Qt", "dateUpdated": "2026-11-02T11:44:37.391Z"}, "title": "Integer overflow vulnerability in XML parsing functionality of Qt5Compat impacts Qt", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-190", "description": "CWE-190 Integer Overflow or Wraparound", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-92", "descriptions": [{"lang": "en", "value": "CAPEC-92 Forced Integer Overflow"}]}], "affected": [{"vendor": "qt", "product": "qt", "modules": ["qt5compat"], "versions": [{"status": "affected", "version": "6.0.0", "lessThanOrEqual": "6.8.9", "versionType": "python"}, {"status": "affected", "version": "6.9.0", "lessThanOrEqual": "6.11.2", "versionType": "python"}, {"status": "affected", "version": "6.12.0", "versionType": "python"}], "defaultStatus": "unaffected", "cpes": ["cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*", "cpe:2.3:a:qt:qt5compat:*:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "An integer overflow vulnerability in the Qt XML parsing (Qt5Compat / QXmlSimpleReader) functionality of Qt.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "An integer overflow vulnerability in the Qt XML parsing (Qt5Compat / QXmlSimpleReader) functionality of Qt."}]}], "references": [{"url": "https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-100140:", "tags": ["vendor-advisory"]}, {"url": "https://codereview.qt-project.org/c/qt/qt5compat/+/768900", "tags": ["patch"]}, {"url": "https://codereview.qt-project.org/c/qt/qt5compat/+/764751", "tags": ["patch"]}, {"url": "https://codereview.qt-project.org/c/qt/qt5compat/+/768901", "tags": ["patch"]}, {"url": "https://codereview.qt-project.org/c/qt/qt5compat/+/768902", "tags": ["patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "LOCAL", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "userInteraction": "PASSIVE", "vulnConfidentialityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "LOW", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subAvailabilityImpact": "NONE", "exploitMaturity": "UNREPORTED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "USER", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "GREEN", "version": "4.0", "baseSeverity": "LOW", "baseScore": 1.9, "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:U/R:U/U:Green"}}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.5"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-11-02T16:54:43.471958Z", "id": "CVE-2026-100140", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-02T16:55:00.571Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-100140", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-02T16:54:43.471958Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-02T16:54:56.348Z"}}], "cna": {"title": "Integer overflow vulnerability in XML parsing functionality of Qt5Compat impacts Qt", "source": {"discovery": "UNKNOWN"}, "impacts": [{"capecId": "CAPEC-92", "descriptions": [{"lang": "en", "value": "CAPEC-92 Forced Integer Overflow"}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "USER", "baseScore": 1.9, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "LOW", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:U/R:U/U:Green", "exploitMaturity": "UNREPORTED", "providerUrgency": "GREEN", "userInteraction": "PASSIVE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "LOW", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*", "cpe:2.3:a:qt:qt5compat:*:*:*:*:*:*:*:*"], "vendor": "qt", "modules": ["qt5compat"], "product": "qt", "versions": [{"status": "affected", "version": "6.0.0", "versionType": "python", "lessThanOrEqual": "6.8.9"}, {"status": "affected", "version": "6.9.0", "versionType": "python", "lessThanOrEqual": "6.11.2"}, {"status": "affected", "version": "6.12.0", "versionType": "python"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-100140:", "tags": ["vendor-advisory"]}, {"url": "https://codereview.qt-project.org/c/qt/qt5compat/+/768900", "tags": ["patch"]}, {"url": "https://codereview.qt-project.org/c/qt/qt5compat/+/764751", "tags": ["patch"]}, {"url": "https://codereview.qt-project.org/c/qt/qt5compat/+/768901", "tags": ["patch"]}, {"url": "https://codereview.qt-project.org/c/qt/qt5compat/+/768902", "tags": ["patch"]}], "x_generator": {"engine": "Vulnogram 1.0.5"}, "descriptions": [{"lang": "en", "value": "An integer overflow vulnerability in the Qt XML parsing (Qt5Compat / QXmlSimpleReader) functionality of Qt.", "supportingMedia": [{"type": "text/html", "value": "An integer overflow vulnerability in the Qt XML parsing (Qt5Compat / QXmlSimpleReader) functionality of Qt.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-190", "description": "CWE-190 Integer Overflow or Wraparound"}]}], "providerMetadata": {"orgId": "a59d8014-47c4-4630-ab43-e1b13cbe58e3", "shortName": "Qt", "dateUpdated": "2026-11-02T11:44:37.391Z"}}}, "cveMetadata": {"cveId": "CVE-2026-100140", "state": "PUBLISHED", "dateUpdated": "2026-11-02T16:55:00.571Z", "dateReserved": "2026-09-25T11:26:30.758Z", "assignerOrgId": "a59d8014-47c4-4630-ab43-e1b13cbe58e3", "datePublished": "2026-11-02T11:44:37.391Z", "assignerShortName": "Qt"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*", "cpe:2.3:a:qt:qt5compat:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "modules": ["qt5compat"], "product": "qt", "vendor": "qt", "versions": [{"lessThanOrEqual": "6.8.9", "status": "affected", "version": "6.0.0", "versionType": "python"}, {"lessThanOrEqual": "6.11.2", "status": "affected", "version": "6.9.0", "versionType": "python"}, {"status": "affected", "version": "6.12.0", "versionType": "python"}]}], "source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An integer overflow vulnerability in the Qt XML parsing (Qt5Compat / QXmlSimpleReader) functionality of Qt."}], "id": "CVE-2026-100140", "lastModified": "2026-11-02T19:14:53.030", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "USER", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 1.9, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "UNREPORTED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "GREEN", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "PASSIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:U/V:X/RE:X/U:Green", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-100140", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-11-02T16:54:43.471958Z", "version": "2.0.3"}}]}, "published": "2026-11-02T12:16:58.910", "references": [{"source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3", "url": "https://codereview.qt-project.org/c/qt/qt5compat/+/764751"}, {"source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3", "url": "https://codereview.qt-project.org/c/qt/qt5compat/+/768900"}, {"source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3", "url": "https://codereview.qt-project.org/c/qt/qt5compat/+/768901"}, {"source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3", "url": "https://codereview.qt-project.org/c/qt/qt5compat/+/768902"}, {"source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3", "url": "https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-100140:"}], "sourceIdentifier": "a59d8014-47c4-4630-ab43-e1b13cbe58e3", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-190"}], "source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3", "type": "Secondary"}]}

{"bugzilla": {"description": "qt6: Integer overflow vulnerability in XML parsing functionality of Qt5Compat impacts Qt", "id": "2565128", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2565128"}, "csaw": false, "cvss3": {"cvss3_base_score": "3.3", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "status": "draft"}, "cwe": "CWE-190", "details": ["A flaw was found in Qt. An integer overflow vulnerability exists in the XML (Extensible Markup Language) parsing functionality within the QXmlSimpleReader component. A local attacker could exploit this flaw by enticing a user or application to process specially crafted XML input. Successful exploitation leads to memory corruption, causing an application crash and resulting in a Denial of Service (DoS)."], "mitigation": {"lang": "en:us", "value": "Migrate client applications from the deprecated QXmlSimpleReader class to QXmlStreamReader in the core Qt XML library. If code migration is not immediately viable, validate and sanitize XML input from untrusted sources prior to parsing."}, "name": "CVE-2026-100140", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "qt6-qt5compat", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/a:redhat:hummingbird:1", "fix_state": "Affected", "package_name": "qt6", "product_name": "Red Hat Hardened Images"}], "public_date": "2026-11-02T11:44:37Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-100140\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-100140\nhttps://codereview.qt-project.org/c/qt/qt5compat/+/764751\nhttps://codereview.qt-project.org/c/qt/qt5compat/+/768900\nhttps://codereview.qt-project.org/c/qt/qt5compat/+/768901\nhttps://codereview.qt-project.org/c/qt/qt5compat/+/768902\nhttps://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-100140:"], "statement": "An integer overflow vulnerability in the QXmlSimpleReader XML parser within Qt's Qt5Compat module allows a local attacker to cause memory corruption and an application crash via specially crafted XML input.", "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.0.0,6.8.9]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.9.0,6.11.2]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.12.0,*]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "qt", "source": "cna", "vendor": "qt"}, "product": "qt", "vendor": "qt"}, {"configurations": [{"platform": null, "status": "affected", "versions": null}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "product": "qt5compat", "vendor": "qt"}], "created": "2026-11-02T13:30:17.907142+00:00", "updated": "2026-11-02T14:45:17.887731+00:00", "vendors": ["qt", "qt$PRODUCT$qt", "qt$PRODUCT$qt5compat"]}