Qt

Products

Exploited and recent CVEs

• CVE-2026-107479 Low 1.7 Integer truncation vulnerability in QTextCodec conversion functions impacts Qt Framework 0.2%
• CVE-2026-110944 Low 2.7 Resource exhaustion vulnerability in HTTP request handling impacts Qt HTTP Server (QHttpServer) 0.3%
• CVE-2026-103653 Medium 6.7 Out-of-bounds read vulnerability in CoAP message parsing impacts Qt CoAP 0.3%
• CVE-2026-100140 Low 1.9 Integer overflow vulnerability in XML parsing functionality of Qt5Compat impacts Qt 0.2%
• CVE-2026-107457 Low 2.3 Memory corruption vulnerability in QMqttClient impacts Qt MQTT 0.3%
• CVE-2026-111487 Medium 4.3 Out-of-bounds write vulnerability in the assimp scene import plugin of Qt3D impacts Qt Framework 0.1%
• CVE-2026-105924 Medium 4.3 NULL pointer dereference vulnerability in QCborValue to JSON conversion impacts Qt 0.2%
• CVE-2026-107590 Low 1.9 Out-of-bounds write vulnerability in QTextCodec iconv-based encoding impacts Qt 0.1%
• CVE-2026-107472 Medium 4.3 Out-of-bounds read vulnerability in QTextCodec TSCII encoding impacts Qt 0.1%
• CVE-2026-105946 Medium 5.3 Out-of-bounds read vulnerability in NTLM authentication handling impacts Qt 0.5%
• CVE-2026-107157 Low 2.0 Out-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt Framework 0.1%
• CVE-2026-96432 Low 2.1 Null pointer dereference vulnerability in QNetworkAccessManager impacts Qt 0.3%
• CVE-2026-95620 Low 2.1 Use-after-free vulnerability in QNetworkAccessManager HTTP/2 support impacts Qt 0.2%
• CVE-2026-16762 High 8.7 Denial-of-service vulnerability in the Qt Core QXmlStream parser (QXmlStreamReader) impacts Qt 0.5%
• CVE-2026-105923 Medium 4.0 Null-pointer dereference in QTriangulator reachable through VectorImage 0.1%
• CVE-2026-101201 Medium 4.3 QBinaryJson::fromBinaryData() integer overflow leading to OOB read 0.2%
• CVE-2026-8168 High 7.1 Denial-of-service vulnerability in the SVG parser and renderer impacts Qt 0.4%
• CVE-2026-94370 Medium 6.5 Memory corruption (double free / use-after-free) vulnerability in core string handling impacts Qt for MCUs 0.3%
• CVE-2026-19395 Medium 6.6 An empty <img> attribute value in styled text triggers a parser error that halts the device. 0.3%
• CVE-2026-95509 High 8.8 Out-of-bounds read vulnerability in string formatting impacts Qt for MCUs 0.3%
• CVE-2026-79680 Medium 4.5 Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module 0.3%
• CVE-2026-78253 Low 2.3 Denial-of-service (stack-exhaustion) vulnerability in QXmlStreamReader::readElementText() impacts Qt 0.4%
• CVE-2026-79616 Low 0.6 Out-of-bounds read vulnerability in Context2D.path and PathSvg.path properties impacts Qt Quick 0.1%
• CVE-2026-76151 Medium 4.6 Out-of-bounds read (buffer over-read) vulnerability in HTTP Cache-Control response header parsing impacts Qt Framework (QtNetwork module) 0.7%
• CVE-2026-19248 High 7.1 Unbounded recursion vulnerability in the QDomNode destructor of Qt XML impacts Qt 0.4%
• CVE-2026-13326 Medium 6.9 Out-of-bounds read and integer underflow vulnerability in QNdefNfcTextRecord impacts Qt NFC module 0.2%
• CVE-2026-11573 High 7.1 Uncontrolled recursion in QDomDocument/QDomNode serialization causes stack exhaustion (QtXml) 0.4%
• CVE-2026-15037 Low 2.9 XML injection vulnerability in QDom comment, CDATA and processing-instruction serialization 0.4%
• CVE-2026-9499 Medium 6.3 Out-of-bounds read in QTextCodec::codecForName() in Qt 0.3%
• CVE-2026-12379 Medium 6.8 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in the Dashboard OAuth/OIDC implementation of Axivion 0.2%