Qt Qt

• CVE-2026-107479 Low 1.7 Integer truncation vulnerability in QTextCodec conversion functions impacts Qt Framework 0.2%
• CVE-2026-103653 Medium 6.7 Out-of-bounds read vulnerability in CoAP message parsing impacts Qt CoAP 0.3%
• CVE-2026-100140 Low 1.9 Integer overflow vulnerability in XML parsing functionality of Qt5Compat impacts Qt 0.2%
• CVE-2026-107457 Low 2.3 Memory corruption vulnerability in QMqttClient impacts Qt MQTT 0.3%
• CVE-2026-105924 Medium 4.3 NULL pointer dereference vulnerability in QCborValue to JSON conversion impacts Qt 0.2%
• CVE-2026-107590 Low 1.9 Out-of-bounds write vulnerability in QTextCodec iconv-based encoding impacts Qt 0.1%
• CVE-2026-107472 Medium 4.3 Out-of-bounds read vulnerability in QTextCodec TSCII encoding impacts Qt 0.1%
• CVE-2026-105946 Medium 5.3 Out-of-bounds read vulnerability in NTLM authentication handling impacts Qt 0.5%
• CVE-2026-107157 Low 2.0 Out-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt Framework 0.1%
• CVE-2026-96432 Low 2.1 Null pointer dereference vulnerability in QNetworkAccessManager impacts Qt 0.3%
• CVE-2026-95620 Low 2.1 Use-after-free vulnerability in QNetworkAccessManager HTTP/2 support impacts Qt 0.2%
• CVE-2026-16762 High 8.7 Denial-of-service vulnerability in the Qt Core QXmlStream parser (QXmlStreamReader) impacts Qt 0.5%
• CVE-2026-105923 Medium 4.0 Null-pointer dereference in QTriangulator reachable through VectorImage 0.1%
• CVE-2026-101201 Medium 4.3 QBinaryJson::fromBinaryData() integer overflow leading to OOB read 0.2%
• CVE-2026-8168 High 7.1 Denial-of-service vulnerability in the SVG parser and renderer impacts Qt 0.4%
• CVE-2026-79680 Medium 4.5 Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module 0.3%
• CVE-2026-78253 Low 2.3 Denial-of-service (stack-exhaustion) vulnerability in QXmlStreamReader::readElementText() impacts Qt 0.4%
• CVE-2026-79616 Low 0.6 Out-of-bounds read vulnerability in Context2D.path and PathSvg.path properties impacts Qt Quick 0.1%
• CVE-2026-76151 Medium 4.6 Out-of-bounds read (buffer over-read) vulnerability in HTTP Cache-Control response header parsing impacts Qt Framework (QtNetwork module) 0.7%
• CVE-2026-19248 High 7.1 Unbounded recursion vulnerability in the QDomNode destructor of Qt XML impacts Qt 0.4%
• CVE-2026-13326 Medium 6.9 Out-of-bounds read and integer underflow vulnerability in QNdefNfcTextRecord impacts Qt NFC module 0.2%
• CVE-2026-11573 High 7.1 Uncontrolled recursion in QDomDocument/QDomNode serialization causes stack exhaustion (QtXml) 0.4%
• CVE-2026-15037 Low 2.9 XML injection vulnerability in QDom comment, CDATA and processing-instruction serialization 0.4%
• CVE-2026-9499 Medium 6.3 Out-of-bounds read in QTextCodec::codecForName() in Qt 0.3%
• CVE-2025-14575 Low 1.8 Uncontrolled Search Path Element in Qt Network OpenSSL TLS backend allows rogue CA certificate loading <0.1%
• CVE-2026-6210 High 8.7 Type confusion and heap-buffer-overflow in Qt SVG marker handling causing application crash 0.3%
• CVE-2025-14576 High 7.8 Possible QML code injection in VectorImage component 0.2%
• CVE-2025-12385 High 8.7 Improper validation of <img> tag size in Text component parser 0.3%
• CVE-2025-23050 Low 3.1 QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read (or division by zero). This is fixed in 5.15.19, 6.5.9, and 6.8.2. 0.2%
• CVE-2025-6338 Critical 9.2 Possible denial of service with multiple incoming connections to a Schannel based server with a TLS backend 0.4%
• CVE-2025-10729 Critical 9.4 Use-after-free vulnerability in Qt SVG qsvghandler.cpp allows denial of service via crafted SVG 0.2%
• CVE-2025-10728 Critical 9.4 Uncontrolled recursion in Qt SVG module 0.2%
• CVE-2025-5992 Low 2.3 Passing values outside of expected range to QColorTransferGenericFunction can cause a denial of service 0.3%
• CVE-2025-5991 Low 2.1 Use after free in QHttp2ProtocolHandler 0.1%
• CVE-2025-5683 Medium 5.1 When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash.  This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is f 0.2%
• CVE-2025-5455 High 8.4 Possible denial of service when passing malformed data in a URL to qDecodeDataUrl 0.4%
• CVE-2025-4211 High 7.3 Improper Link Resolution Before File Access in QFileSystemEngine on Windows 0.2%
• CVE-2025-3512 Medium 4.8 Buffer overflow in QTextMarkdownImporter 0.2%
• CVE-2025-30348 Medium 5.8 encodeText in QDom in Qt before 6.8.0 has a complex algorithm involving XML string copy and inline replacement of parts of a string (with relocation of later data). 0.4%