CVE-2026-107479

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-107479", "assignerOrgId": "a59d8014-47c4-4630-ab43-e1b13cbe58e3", "state": "PUBLISHED", "assignerShortName": "Qt", "dateReserved": "2026-10-08T07:59:02.714Z", "datePublished": "2026-11-04T12:10:28.423Z", "dateUpdated": "2026-11-09T21:13:33.488Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "a59d8014-47c4-4630-ab43-e1b13cbe58e3", "shortName": "Qt", "dateUpdated": "2026-11-04T12:10:28.423Z"}, "title": "Integer truncation vulnerability in QTextCodec conversion functions impacts Qt Framework", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-197", "description": "CWE-197 Numeric Truncation Error", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-92", "descriptions": [{"lang": "en", "value": "CAPEC-92 Forced Integer Overflow"}]}], "affected": [{"vendor": "qt", "product": "Qt", "modules": ["qt5compat", "qtbase"], "versions": [{"status": "unknown", "version": "0", "lessThan": "5.0.0", "versionType": "python"}, {"status": "affected", "version": "5.0.0", "lessThanOrEqual": "6.8.8", "versionType": "python"}, {"status": "affected", "version": "6.9.0", "lessThanOrEqual": "6.11.2", "versionType": "python"}], "defaultStatus": "unaffected", "cpes": ["cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*", "cpe:2.3:a:qt:qt5compat:*:*:*:*:*:*:*:*", "cpe:2.3:a:qt:qtbase:*:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "An integer truncation vulnerability in the QTextCodec conversion functions of the Qt 5 Core Compatibility APIs module impacts the Qt Framework. An application using the affected functionality could crash.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>An integer truncation vulnerability in the QTextCodec conversion functions of the Qt 5 Core Compatibility APIs module impacts the Qt Framework. An application using the affected functionality could crash.</p>"}]}], "references": [{"url": "https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-107479:", "tags": ["vendor-advisory"]}, {"url": "https://codereview.qt-project.org/c/qt/qt5compat/+/763226", "tags": ["patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "LOCAL", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "userInteraction": "ACTIVE", "vulnConfidentialityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subAvailabilityImpact": "NONE", "exploitMaturity": "UNREPORTED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "LOW", "providerUrgency": "GREEN", "version": "4.0", "baseSeverity": "LOW", "baseScore": 1.7, "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/RE:L/U:Green"}}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.5"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-11-09T21:13:22.657768Z", "id": "CVE-2026-107479", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-09T21:13:33.488Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-107479", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-09T21:13:22.657768Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-09T21:13:28.353Z"}}], "cna": {"title": "Integer truncation vulnerability in QTextCodec conversion functions impacts Qt Framework", "source": {"discovery": "UNKNOWN"}, "impacts": [{"capecId": "CAPEC-92", "descriptions": [{"lang": "en", "value": "CAPEC-92 Forced Integer Overflow"}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 1.7, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "LOW", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/RE:L/U:Green", "exploitMaturity": "UNREPORTED", "providerUrgency": "GREEN", "userInteraction": "ACTIVE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnerabilityResponseEffort": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*", "cpe:2.3:a:qt:qt5compat:*:*:*:*:*:*:*:*", "cpe:2.3:a:qt:qtbase:*:*:*:*:*:*:*:*"], "vendor": "qt", "modules": ["qt5compat", "qtbase"], "product": "Qt", "versions": [{"status": "unknown", "version": "0", "lessThan": "5.0.0", "versionType": "python"}, {"status": "affected", "version": "5.0.0", "versionType": "python", "lessThanOrEqual": "6.8.8"}, {"status": "affected", "version": "6.9.0", "versionType": "python", "lessThanOrEqual": "6.11.2"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-107479:", "tags": ["vendor-advisory"]}, {"url": "https://codereview.qt-project.org/c/qt/qt5compat/+/763226", "tags": ["patch"]}], "x_generator": {"engine": "Vulnogram 1.0.5"}, "descriptions": [{"lang": "en", "value": "An integer truncation vulnerability in the QTextCodec conversion functions of the Qt 5 Core Compatibility APIs module impacts the Qt Framework. An application using the affected functionality could crash.", "supportingMedia": [{"type": "text/html", "value": "<p>An integer truncation vulnerability in the QTextCodec conversion functions of the Qt 5 Core Compatibility APIs module impacts the Qt Framework. An application using the affected functionality could crash.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-197", "description": "CWE-197 Numeric Truncation Error"}]}], "providerMetadata": {"orgId": "a59d8014-47c4-4630-ab43-e1b13cbe58e3", "shortName": "Qt", "dateUpdated": "2026-11-04T12:10:28.423Z"}}}, "cveMetadata": {"cveId": "CVE-2026-107479", "state": "PUBLISHED", "dateUpdated": "2026-11-09T21:13:33.488Z", "dateReserved": "2026-10-08T07:59:02.714Z", "assignerOrgId": "a59d8014-47c4-4630-ab43-e1b13cbe58e3", "datePublished": "2026-11-04T12:10:28.423Z", "assignerShortName": "Qt"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*", "cpe:2.3:a:qt:qt5compat:*:*:*:*:*:*:*:*", "cpe:2.3:a:qt:qtbase:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "modules": ["qt5compat", "qtbase"], "product": "Qt", "vendor": "qt", "versions": [{"lessThan": "5.0.0", "status": "unknown", "version": "0", "versionType": "python"}, {"lessThanOrEqual": "6.8.8", "status": "affected", "version": "5.0.0", "versionType": "python"}, {"lessThanOrEqual": "6.11.2", "status": "affected", "version": "6.9.0", "versionType": "python"}]}], "source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An integer truncation vulnerability in the QTextCodec conversion functions of the Qt 5 Core Compatibility APIs module impacts the Qt Framework. An application using the affected functionality could crash."}], "id": "CVE-2026-107479", "lastModified": "2026-11-09T22:18:22.453", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 1.7, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "UNREPORTED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "GREEN", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "ACTIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:L/U:Green", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "LOW"}, "source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-107479", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-11-09T21:13:22.657768Z", "version": "2.0.3"}}]}, "published": "2026-11-04T13:17:21.540", "references": [{"source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3", "url": "https://codereview.qt-project.org/c/qt/qt5compat/+/763226"}, {"source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3", "url": "https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-107479:"}], "sourceIdentifier": "a59d8014-47c4-4630-ab43-e1b13cbe58e3", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-197"}], "source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3", "type": "Secondary"}]}

{"bugzilla": {"description": "qt6: qt6: Denial of Service via integer truncation in QTextCodec conversion functions", "id": "2566861", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2566861"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-681", "details": ["An integer truncation vulnerability in the QTextCodec conversion functions of the Qt 5 Core Compatibility APIs module impacts the Qt Framework. An application using the affected functionality could crash.", "A flaw was found in Qt. An integer truncation vulnerability in the QTextCodec conversion functions of the Core Compatibility APIs module can cause an application crash, leading to a Denial of Service (DoS). A local attacker could exploit this flaw by tricking a user into processing specially crafted data, causing the application to terminate unexpectedly."], "mitigation": {"lang": "en:us", "value": "No specific mitigation; users can avoid opening untrusted data with Qt applications that use QTextCodec conversion functions. Updating to a Qt version containing the fix (6.8.9/6.11.3/6.12.0) resolves the issue."}, "name": "CVE-2026-107479", "package_state": [{"cpe": "cpe:/a:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "qt6", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/a:redhat:enterprise_linux:8", "fix_state": "Under investigation", "package_name": "qt5", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/a:redhat:enterprise_linux:9", "fix_state": "Under investigation", "package_name": "qt5", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:hummingbird:1", "fix_state": "Under investigation", "package_name": "qt5", "product_name": "Red Hat Hardened Images"}, {"cpe": "cpe:/a:redhat:hummingbird:1", "fix_state": "Affected", "package_name": "qt6", "product_name": "Red Hat Hardened Images"}], "public_date": "2026-11-04T12:10:28Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-107479\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-107479\nhttps://codereview.qt-project.org/c/qt/qt5compat/+/763226\nhttps://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-107479:"], "statement": "An integer truncation flaw was found in the Qt QTextCodec conversion functions (qt5compat/Qt 5 Core Compatibility APIs; qtbase in Qt 5). A local attacker could trick a user into processing specially crafted data, causing a Qt application to crash (denial of service). RH rated this MODERATE (CVSS 5.5, AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H); the upstream CVSS4 score (1.7) differs due to CVSS version and AC/UI metric choices. Fixed upstream in Qt 6.8.9, 6.11.3, and 6.12.0.", "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "unknown", "versions": {"scheme": "semver", "value": "[0,5.0.0)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[5.0.0,6.8.8]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.9.0,6.11.2]"}}], "enrichment": {"confidence": 90.0, "confidence_source": "inferred", "scores": [{"score": 90.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Qt", "source": "cna", "vendor": "qt"}, "product": "qt", "vendor": "qt"}, {"configurations": [{"platform": null, "status": "affected", "versions": null}], "enrichment": {"confidence": 90.0, "confidence_source": "inferred", "scores": [{"score": 90.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "product": "qt5compat", "vendor": "qt"}, {"configurations": [{"platform": null, "status": "affected", "versions": null}], "enrichment": {"confidence": 90.0, "confidence_source": "inferred", "scores": [{"score": 90.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "product": "qtbase", "vendor": "qt"}], "created": "2026-11-04T13:15:14.746752+00:00", "updated": "2026-11-06T02:00:10.169120+00:00", "vendors": ["qt", "qt$PRODUCT$qt", "qt$PRODUCT$qt5compat", "qt$PRODUCT$qtbase"]}