CVE-2026-107479

Integer truncation vulnerability in QTextCodec conversion functions impacts Qt Framework

1.7 Low

An integer truncation vulnerability in the QTextCodec conversion functions of the Qt 5 Core Compatibility APIs module impacts the Qt Framework. An application using the affected functionality could crash.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: None
User interaction: Active

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

0.16%Unchanged since Nov 5, 2026

What each source reports

CVE List Score used 1.7

Integer truncation vulnerability in QTextCodec conversion functions impacts Qt Framework

Record: CVE-2026-107479
CVSS 4.0: 1.7 LowCVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/RE:L/U:Green
Weakness: CWE-197
Updated: 2026-11-04

EUVDEUVD-2026-116890 1.7

Record: EUVD-2026-116890
CVSS 4.0: 1.7 LowCVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/RE:L/U:Green
Updated: 2026-11-04

GitHub AdvisoriesGHSA-q929-xhmp-hf8w 1.7

An integer truncation vulnerability in the QTextCodec conversion functions of the Qt 5 Core...

Record: GHSA-q929-xhmp-hf8w
CVSS 4.0: 1.7 LowCVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:L/U:Green
Weakness: CWE-197
Updated: 2026-11-04

NVD 1.7

Record: CVE-2026-107479
CVSS 4.0: 1.7 LowCVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:L/U:Green
Weakness: CWE-197
Updated: 2026-11-07

OSVUBUNTU-CVE-2026-107479 1.7

Record: UBUNTU-CVE-2026-107479
CVSS 4.0: 1.7 LowCVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/RE:L/U:Green
Updated: 2026-11-06

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`qtbase-opensource-src` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 5.4.2+dfsg-2ubuntu95.5.1+dfsg-6ubuntu45.5.1+dfsg-10ubuntu25.5.1+dfsg-13ubuntu15.5.1+dfsg-13ubuntu2 Show 15 moreShow less 5.5.1+dfsg-13ubuntu35.5.1+dfsg-14ubuntu15.5.1+dfsg-14ubuntu25.5.1+dfsg-14ubuntu35.5.1+dfsg-15ubuntu15.5.1+dfsg-16ubuntu15.5.1+dfsg-16ubuntu65.5.1+dfsg-16ubuntu75.5.1+dfsg-16ubuntu7.15.5.1+dfsg-16ubuntu7.25.5.1+dfsg-16ubuntu7.55.5.1+dfsg-16ubuntu7.65.5.1+dfsg-16ubuntu7.75.5.1+dfsg-16ubuntu7.7+esm15.5.1+dfsg-16ubuntu7.7+esm2	None known
`qtbase-opensource-src` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.9.1+dfsg-10ubuntu15.9.1+dfsg-10ubuntu25.9.2+dfsg-4ubuntu65.9.3+dfsg-0ubuntu15.9.3+dfsg-0ubuntu3 Show 12 moreShow less 5.9.3+dfsg-0ubuntu45.9.4+dfsg-0ubuntu35.9.4+dfsg-0ubuntu45.9.5+dfsg-0ubuntu15.9.5+dfsg-0ubuntu25.9.5+dfsg-0ubuntu2.15.9.5+dfsg-0ubuntu2.35.9.5+dfsg-0ubuntu2.45.9.5+dfsg-0ubuntu2.55.9.5+dfsg-0ubuntu2.65.9.5+dfsg-0ubuntu2.6+esm15.9.5+dfsg-0ubuntu2.6+esm2	None known
`qtbase-opensource-src` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.12.4+dfsg-4ubuntu15.12.5+dfsg-25.12.5+dfsg-85.12.5+dfsg-8build15.12.5+dfsg-9build1 Show 6 moreShow less 5.12.8+dfsg-0ubuntu15.12.8+dfsg-0ubuntu2.15.12.8+dfsg-0ubuntu2.1+esm15.12.8+dfsg-0ubuntu2.1+esm25.12.8+dfsg-0ubuntu2.1+esm35.12.8+dfsg-0ubuntu2.1+esm4	None known
`qt6-5compat` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.2-56.2.4-1	None known
`qtbase-opensource-src` Ubuntu:Pro:22.04:LTS	All versions, plus listed versions 5.15.2+dfsg-125.15.2+dfsg-135.15.2+dfsg-145.15.2+dfsg-14ubuntu15.15.2+dfsg-14ubuntu3 Show 8 moreShow less 5.15.2+dfsg-155.15.3+dfsg-15.15.3+dfsg-25.15.3+dfsg-2ubuntu0.15.15.3+dfsg-2ubuntu0.25.15.3+dfsg-2ubuntu0.2+esm15.15.3+dfsg-2ubuntu0.2+esm25.15.3+dfsg-2ubuntu0.2+esm3	None known
`qt6-5compat` Ubuntu:24.04:LTS	All versions, plus listed versions 6.4.2-36.4.2-46.4.2-4build16.4.2-4build26.4.2-4build3	None known
`qtbase-opensource-src` Ubuntu:Pro:24.04:LTS	All versions, plus listed versions 5.15.10+dfsg-35.15.10+dfsg-55.15.10+dfsg-5ubuntu15.15.12+dfsg-1ubuntu15.15.12+dfsg-3ubuntu1 Show 4 moreShow less 5.15.12+dfsg-3ubuntu65.15.12+dfsg-3ubuntu75.15.13+dfsg-1ubuntu15.15.13+dfsg-1ubuntu1+esm1	None known
`qt6-5compat` Ubuntu:26.10	All versions, plus listed versions 6.10.2-16.10.2-36.10.2-46.11.2-1	None known
`qtbase-opensource-src` Ubuntu:26.10	All versions, plus listed versions 5.15.18+dfsg-1ubuntu15.15.19+dfsg-2ubuntu15.15.19+dfsg-2ubuntu2	None known
`qt6-5compat` Ubuntu:26.04:LTS	All versions, plus listed versions 6.9.2-16.9.2-36.9.2-3build16.10.2-1	None known
`qtbase-opensource-src` Ubuntu:26.04:LTS	All versions, plus listed versions 5.15.17+dfsg-1ubuntu15.15.17+dfsg-1ubuntu25.15.18+dfsg-1ubuntu1	None known

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, aliases, references	OSV
Nov 4, 2026	published	EUVD
Nov 4, 2026	published	EUVD, NVD
Nov 4, 2026	aliases, references	GitHub Advisories
Nov 4, 2026	cwes, products, references, severity, title	CVE List
Nov 4, 2026	first indexed	EUVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-107479 is a low vulnerability (CVSS 1.7) in Qt, published November 4, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.16%, the 5th percentile. No source names a fixed version.