Every CVESearch/Get API key

CVE-2026-76151

Out-of-bounds read (buffer over-read) vulnerability in HTTP Cache-Control response header parsing impacts Qt Framework (QtNetwork module)

4.6 MediumFix available

CVE-2026-76151 is a medium vulnerability (CVSS 4.6) in Qt, published September 16, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.66%, the 52nd percentile. Fixed in qt6-base 6.11.2+dfsg-5.

What does this mean?
Severity
4.6 MediumCVSS 4.0, CVE List
Exploit chance
0.66%EPSS, 52nd percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
6.11.2+dfsg-5qt6-base +96 more

Description

Out-of-bounds read (buffer over-read) in the HTTP Cache-Control response header parsing in the QtNetwork module in Qt Group Qt 6.0.0 through 6.8.8, and 6.9.0 through 6.11.1, allows remote attackers to cause a denial of service (application crash) via an excessively large Cache-Control header value returned by an untrusted or compromised HTTP server to an application using QNetworkAccessManager. Only the client side of the connection is affected and 32-bit builds are not affected; the out-of-bounds access is read-only, with no information disclosure and no code execution.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.66%Unchanged since Sep 17, 2026
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
qt6-base
Debian:12
All versions, plus listed versions
6.10.2+dfsg-16.10.2+dfsg-106.10.2+dfsg-10+hurd.16.10.2+dfsg-116.10.2+dfsg-12
Show 45 moreShow less
6.10.2+dfsg-136.10.2+dfsg-146.10.2+dfsg-156.10.2+dfsg-166.10.2+dfsg-26.10.2+dfsg-36.10.2+dfsg-46.10.2+dfsg-56.10.2+dfsg-66.10.2+dfsg-76.10.2+dfsg-7+hurd.16.10.2+dfsg-86.10.2+dfsg-96.11.2+dfsg-16.11.2+dfsg-26.11.2+dfsg-36.11.2+dfsg-46.11.2+dfsg-56.4.2+dfsg-106.4.2+dfsg-116.4.2+dfsg-11~bpo11+16.4.2+dfsg-126.4.2+dfsg-136.4.2+dfsg-146.4.2+dfsg-156.4.2+dfsg-166.4.2+dfsg-176.4.2+dfsg-186.4.2+dfsg-18+loong646.4.2+dfsg-196.4.2+dfsg-206.4.2+dfsg-216.4.2+dfsg-21.16.6.0+dfsg-16.6.0+dfsg-26.6.0+dfsg-36.6.0+dfsg-46.6.0+dfsg-56.6.0+dfsg-66.6.1+dfsg-16.6.1+dfsg-26.6.1+dfsg-36.6.1+dfsg-46.6.1+dfsg-56.6.1+dfsg-6
None known
qt6-base
Debian:13
All versions, plus listed versions
6.10.2+dfsg-16.10.2+dfsg-106.10.2+dfsg-10+hurd.16.10.2+dfsg-116.10.2+dfsg-12
Show 32 moreShow less
6.10.2+dfsg-136.10.2+dfsg-146.10.2+dfsg-156.10.2+dfsg-166.10.2+dfsg-26.10.2+dfsg-36.10.2+dfsg-46.10.2+dfsg-56.10.2+dfsg-66.10.2+dfsg-76.10.2+dfsg-7+hurd.16.10.2+dfsg-86.10.2+dfsg-96.11.2+dfsg-16.11.2+dfsg-26.11.2+dfsg-36.11.2+dfsg-46.11.2+dfsg-56.8.2+dfsg-106.8.2+dfsg-10.16.8.2+dfsg-96.8.2+dfsg-9+deb13u16.8.2+dfsg-9+deb13u26.9.1+dfsg-16.9.1+dfsg-26.9.1+dfsg-36.9.1+dfsg-46.9.1+dfsg-56.9.2+dfsg-16.9.2+dfsg-26.9.2+dfsg-36.9.2+dfsg-4
None known
qt6-base
Debian:14
before 6.11.2+dfsg-5, plus listed versions
6.10.2+dfsg-16.10.2+dfsg-106.10.2+dfsg-10+hurd.16.10.2+dfsg-116.10.2+dfsg-12
Show 29 moreShow less
6.10.2+dfsg-136.10.2+dfsg-146.10.2+dfsg-156.10.2+dfsg-166.10.2+dfsg-26.10.2+dfsg-36.10.2+dfsg-46.10.2+dfsg-56.10.2+dfsg-66.10.2+dfsg-76.10.2+dfsg-7+hurd.16.10.2+dfsg-86.10.2+dfsg-96.11.2+dfsg-16.11.2+dfsg-26.11.2+dfsg-36.11.2+dfsg-46.8.2+dfsg-106.8.2+dfsg-10.16.8.2+dfsg-96.9.1+dfsg-16.9.1+dfsg-26.9.1+dfsg-36.9.1+dfsg-46.9.1+dfsg-56.9.2+dfsg-16.9.2+dfsg-26.9.2+dfsg-36.9.2+dfsg-4
6.11.2+dfsg-5
qt6-qtbase
openEuler:24.03-LTS-SP3
From an advisory covering 5 CVEs
before 6.5.2-18.oe2403sp3
6.5.2-18.oe2403sp3
qt6-qtbase
openEuler:24.03-LTS-SP4
From an advisory covering 2 CVEs
before 6.5.2-18.oe2403sp4
6.5.2-18.oe2403sp4
qt6-qtbase
openEuler:24.03-LTS-SP1
From an advisory covering 5 CVEs
before 6.5.2-18.oe2403sp1
6.5.2-18.oe2403sp1
qt6-qtbase
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
before 0:6.11.2-3.1.hum1
0:6.11.2-3.1.hum1
qt6-qtbase-common
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
before 0:6.11.2-3.1.hum1
0:6.11.2-3.1.hum1
qt6-qtbase-devel
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
before 0:6.11.2-3.1.hum1
0:6.11.2-3.1.hum1
qt6-qtbase-examples
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
before 0:6.11.2-3.1.hum1
0:6.11.2-3.1.hum1
Show 87 moreShow less
Affected packages
PackageAffectedFixed
qt6-qtbase-gui
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
before 0:6.11.2-3.1.hum1
0:6.11.2-3.1.hum1
qt6-qtbase-ibase
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
before 0:6.11.2-3.1.hum1
0:6.11.2-3.1.hum1
qt6-qtbase-mysql
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
before 0:6.11.2-3.1.hum1
0:6.11.2-3.1.hum1
qt6-qtbase-odbc
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
before 0:6.11.2-3.1.hum1
0:6.11.2-3.1.hum1
qt6-qtbase-postgresql
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
before 0:6.11.2-3.1.hum1
0:6.11.2-3.1.hum1
qt6-qtbase-private-devel
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
before 0:6.11.2-3.1.hum1
0:6.11.2-3.1.hum1
qt6-qtbase-static
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
before 0:6.11.2-3.1.hum1
0:6.11.2-3.1.hum1
qt5-qtbase
Red Hat:hummingbird:1
before 0:5.15.18-5.3.hum1
0:5.15.18-5.3.hum1
qt5-qtbase-common
Red Hat:hummingbird:1
before 0:5.15.18-5.3.hum1
0:5.15.18-5.3.hum1
qt5-qtbase-devel
Red Hat:hummingbird:1
before 0:5.15.18-5.3.hum1
0:5.15.18-5.3.hum1
qt5-qtbase-examples
Red Hat:hummingbird:1
before 0:5.15.18-5.3.hum1
0:5.15.18-5.3.hum1
qt5-qtbase-gui
Red Hat:hummingbird:1
before 0:5.15.18-5.3.hum1
0:5.15.18-5.3.hum1
qt5-qtbase-ibase
Red Hat:hummingbird:1
before 0:5.15.18-5.3.hum1
0:5.15.18-5.3.hum1
qt5-qtbase-mysql
Red Hat:hummingbird:1
before 0:5.15.18-5.3.hum1
0:5.15.18-5.3.hum1
qt5-qtbase-odbc
Red Hat:hummingbird:1
before 0:5.15.18-5.3.hum1
0:5.15.18-5.3.hum1
qt5-qtbase-postgresql
Red Hat:hummingbird:1
before 0:5.15.18-5.3.hum1
0:5.15.18-5.3.hum1
qt5-qtbase-private-devel
Red Hat:hummingbird:1
before 0:5.15.18-5.3.hum1
0:5.15.18-5.3.hum1
qt5-qtbase-static
Red Hat:hummingbird:1
before 0:5.15.18-5.3.hum1
0:5.15.18-5.3.hum1
qt5-qtbase-tds
Red Hat:hummingbird:1
before 0:5.15.18-5.3.hum1
0:5.15.18-5.3.hum1
qt6-qtbase
Red Hat:enterprise_linux:10.3
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_3.2
0:6.10.1-1.el10_3.2
qt6-qtbase-common
Red Hat:enterprise_linux:10.3
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_3.2
0:6.10.1-1.el10_3.2
qt6-qtbase-debuginfo
Red Hat:enterprise_linux:10.3
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_3.2
0:6.10.1-1.el10_3.2
qt6-qtbase-debugsource
Red Hat:enterprise_linux:10.3
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_3.2
0:6.10.1-1.el10_3.2
qt6-qtbase-devel
Red Hat:enterprise_linux:10.3
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_3.2
0:6.10.1-1.el10_3.2
qt6-qtbase-devel-debuginfo
Red Hat:enterprise_linux:10.3
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_3.2
0:6.10.1-1.el10_3.2
qt6-qtbase-examples-debuginfo
Red Hat:enterprise_linux:10.3
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_3.2
0:6.10.1-1.el10_3.2
qt6-qtbase-gui
Red Hat:enterprise_linux:10.3
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_3.2
0:6.10.1-1.el10_3.2
qt6-qtbase-gui-debuginfo
Red Hat:enterprise_linux:10.3
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_3.2
0:6.10.1-1.el10_3.2
qt6-qtbase-mysql
Red Hat:enterprise_linux:10.3
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_3.2
0:6.10.1-1.el10_3.2
qt6-qtbase-mysql-debuginfo
Red Hat:enterprise_linux:10.3
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_3.2
0:6.10.1-1.el10_3.2
qt6-qtbase-odbc
Red Hat:enterprise_linux:10.3
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_3.2
0:6.10.1-1.el10_3.2
qt6-qtbase-odbc-debuginfo
Red Hat:enterprise_linux:10.3
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_3.2
0:6.10.1-1.el10_3.2
qt6-qtbase-postgresql
Red Hat:enterprise_linux:10.3
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_3.2
0:6.10.1-1.el10_3.2
qt6-qtbase-postgresql-debuginfo
Red Hat:enterprise_linux:10.3
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_3.2
0:6.10.1-1.el10_3.2
qt6-qtbase-tests-debuginfo
Red Hat:enterprise_linux:10.3
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_3.2
0:6.10.1-1.el10_3.2
qt6-qtbase-examples
Red Hat:enterprise_linux:10.3
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_3.2
0:6.10.1-1.el10_3.2
qt6-qtbase-private-devel
Red Hat:enterprise_linux:10.3
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_3.2
0:6.10.1-1.el10_3.2
qt6-qtbase-static
Red Hat:enterprise_linux:10.3
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_3.2
0:6.10.1-1.el10_3.2
qt6-qtbase
Red Hat:enterprise_linux_eus:10.2
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_2.2
0:6.10.1-1.el10_2.2
qt6-qtbase-common
Red Hat:enterprise_linux_eus:10.2
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_2.2
0:6.10.1-1.el10_2.2
qt6-qtbase-debuginfo
Red Hat:enterprise_linux_eus:10.2
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_2.2
0:6.10.1-1.el10_2.2
qt6-qtbase-debugsource
Red Hat:enterprise_linux_eus:10.2
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_2.2
0:6.10.1-1.el10_2.2
qt6-qtbase-devel
Red Hat:enterprise_linux_eus:10.2
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_2.2
0:6.10.1-1.el10_2.2
qt6-qtbase-devel-debuginfo
Red Hat:enterprise_linux_eus:10.2
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_2.2
0:6.10.1-1.el10_2.2
qt6-qtbase-examples-debuginfo
Red Hat:enterprise_linux_eus:10.2
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_2.2
0:6.10.1-1.el10_2.2
qt6-qtbase-gui
Red Hat:enterprise_linux_eus:10.2
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_2.2
0:6.10.1-1.el10_2.2
qt6-qtbase-gui-debuginfo
Red Hat:enterprise_linux_eus:10.2
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_2.2
0:6.10.1-1.el10_2.2
qt6-qtbase-mysql
Red Hat:enterprise_linux_eus:10.2
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_2.2
0:6.10.1-1.el10_2.2
qt6-qtbase-mysql-debuginfo
Red Hat:enterprise_linux_eus:10.2
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_2.2
0:6.10.1-1.el10_2.2
qt6-qtbase-odbc
Red Hat:enterprise_linux_eus:10.2
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_2.2
0:6.10.1-1.el10_2.2
qt6-qtbase-odbc-debuginfo
Red Hat:enterprise_linux_eus:10.2
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_2.2
0:6.10.1-1.el10_2.2
qt6-qtbase-postgresql
Red Hat:enterprise_linux_eus:10.2
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_2.2
0:6.10.1-1.el10_2.2
qt6-qtbase-postgresql-debuginfo
Red Hat:enterprise_linux_eus:10.2
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_2.2
0:6.10.1-1.el10_2.2
qt6-qtbase-tests-debuginfo
Red Hat:enterprise_linux_eus:10.2
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_2.2
0:6.10.1-1.el10_2.2
qt6-qtbase-examples
Red Hat:enterprise_linux_eus:10.2
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_2.2
0:6.10.1-1.el10_2.2
qt6-qtbase-private-devel
Red Hat:enterprise_linux_eus:10.2
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_2.2
0:6.10.1-1.el10_2.2
qt6-qtbase-static
Red Hat:enterprise_linux_eus:10.2
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_2.2
0:6.10.1-1.el10_2.2
qt6-qtbase-static
Rocky Linux:10
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_3.2
0:6.10.1-1.el10_3.2
qt6-qtbase-devel
Rocky Linux:10
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_3.2
0:6.10.1-1.el10_3.2
qt6-qtbase-postgresql-debuginfo
Rocky Linux:10
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_3.2
0:6.10.1-1.el10_3.2
qt6-qtbase
Rocky Linux:10
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_3.2
0:6.10.1-1.el10_3.2
qt6-qtbase-odbc
Rocky Linux:10
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_3.2
0:6.10.1-1.el10_3.2
qt6-qtbase-mysql-debuginfo
Rocky Linux:10
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_3.2
0:6.10.1-1.el10_3.2
qt6-qtbase-odbc-debuginfo
Rocky Linux:10
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_3.2
0:6.10.1-1.el10_3.2
qt6-qtbase-debugsource
Rocky Linux:10
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_3.2
0:6.10.1-1.el10_3.2
qt6-qtbase-postgresql
Rocky Linux:10
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_3.2
0:6.10.1-1.el10_3.2
qt6-qtbase-examples-debuginfo
Rocky Linux:10
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_3.2
0:6.10.1-1.el10_3.2
qt6-qtbase-devel-debuginfo
Rocky Linux:10
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_3.2
0:6.10.1-1.el10_3.2
qt6-qtbase-gui-debuginfo
Rocky Linux:10
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_3.2
0:6.10.1-1.el10_3.2
qt6-qtbase-examples
Rocky Linux:10
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_3.2
0:6.10.1-1.el10_3.2
qt6-qtbase-private-devel
Rocky Linux:10
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_3.2
0:6.10.1-1.el10_3.2
qt6-qtbase-mysql
Rocky Linux:10
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_3.2
0:6.10.1-1.el10_3.2
qt6-qtbase-debuginfo
Rocky Linux:10
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_3.2
0:6.10.1-1.el10_3.2
qt6-qtbase-gui
Rocky Linux:10
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_3.2
0:6.10.1-1.el10_3.2
qt6-qtbase-common
Rocky Linux:10
From an advisory covering 2 CVEs
before 0:6.10.1-1.el10_3.2
0:6.10.1-1.el10_3.2
qtbase-opensource-src
Ubuntu:Pro:16.04:LTS
All versions, plus listed versions
5.4.2+dfsg-2ubuntu95.5.1+dfsg-6ubuntu45.5.1+dfsg-10ubuntu25.5.1+dfsg-13ubuntu15.5.1+dfsg-13ubuntu2
Show 15 moreShow less
5.5.1+dfsg-13ubuntu35.5.1+dfsg-14ubuntu15.5.1+dfsg-14ubuntu25.5.1+dfsg-14ubuntu35.5.1+dfsg-15ubuntu15.5.1+dfsg-16ubuntu15.5.1+dfsg-16ubuntu65.5.1+dfsg-16ubuntu75.5.1+dfsg-16ubuntu7.15.5.1+dfsg-16ubuntu7.25.5.1+dfsg-16ubuntu7.55.5.1+dfsg-16ubuntu7.65.5.1+dfsg-16ubuntu7.75.5.1+dfsg-16ubuntu7.7+esm15.5.1+dfsg-16ubuntu7.7+esm2
None known
qtbase-opensource-src
Ubuntu:Pro:18.04:LTS
All versions, plus listed versions
5.9.1+dfsg-10ubuntu15.9.1+dfsg-10ubuntu25.9.2+dfsg-4ubuntu65.9.3+dfsg-0ubuntu15.9.3+dfsg-0ubuntu3
Show 12 moreShow less
5.9.3+dfsg-0ubuntu45.9.4+dfsg-0ubuntu35.9.4+dfsg-0ubuntu45.9.5+dfsg-0ubuntu15.9.5+dfsg-0ubuntu25.9.5+dfsg-0ubuntu2.15.9.5+dfsg-0ubuntu2.35.9.5+dfsg-0ubuntu2.45.9.5+dfsg-0ubuntu2.55.9.5+dfsg-0ubuntu2.65.9.5+dfsg-0ubuntu2.6+esm15.9.5+dfsg-0ubuntu2.6+esm2
None known
qtbase-opensource-src
Ubuntu:Pro:20.04:LTS
All versions, plus listed versions
5.12.4+dfsg-4ubuntu15.12.5+dfsg-25.12.5+dfsg-85.12.5+dfsg-8build15.12.5+dfsg-9build1
Show 6 moreShow less
5.12.8+dfsg-0ubuntu15.12.8+dfsg-0ubuntu2.15.12.8+dfsg-0ubuntu2.1+esm15.12.8+dfsg-0ubuntu2.1+esm25.12.8+dfsg-0ubuntu2.1+esm35.12.8+dfsg-0ubuntu2.1+esm4
None known
qt6-base
Ubuntu:22.04:LTS
All versions, plus listed versions
6.2.2+dfsg-5ubuntu16.2.2+dfsg-6ubuntu16.2.2+dfsg-6ubuntu26.2.4+dfsg-1ubuntu16.2.4+dfsg-2ubuntu16.2.4+dfsg-2ubuntu1.1
None known
qtbase-opensource-src
Ubuntu:Pro:22.04:LTS
All versions, plus listed versions
5.15.2+dfsg-125.15.2+dfsg-135.15.2+dfsg-145.15.2+dfsg-14ubuntu15.15.2+dfsg-14ubuntu3
Show 8 moreShow less
5.15.2+dfsg-155.15.3+dfsg-15.15.3+dfsg-25.15.3+dfsg-2ubuntu0.15.15.3+dfsg-2ubuntu0.25.15.3+dfsg-2ubuntu0.2+esm15.15.3+dfsg-2ubuntu0.2+esm25.15.3+dfsg-2ubuntu0.2+esm3
None known
qt6-base
Ubuntu:24.04:LTS
All versions, plus listed versions
6.4.2+dfsg-186.4.2+dfsg-196.4.2+dfsg-19build16.4.2+dfsg-206.4.2+dfsg-216.4.2+dfsg-21.1build46.4.2+dfsg-21.1build5
None known
qtbase-opensource-src
Ubuntu:Pro:24.04:LTS
All versions, plus listed versions
5.15.10+dfsg-35.15.10+dfsg-55.15.10+dfsg-5ubuntu15.15.12+dfsg-1ubuntu15.15.12+dfsg-3ubuntu1
Show 4 moreShow less
5.15.12+dfsg-3ubuntu65.15.12+dfsg-3ubuntu75.15.13+dfsg-1ubuntu15.15.13+dfsg-1ubuntu1+esm1
None known
qt6-base
Ubuntu:26.10
All versions, plus listed versions
6.10.2+dfsg-76.10.2+dfsg-14ubuntu26.10.2+dfsg-156.10.2+dfsg-166.11.2+dfsg-4ubuntu2
None known
qtbase-opensource-src
Ubuntu:26.10
All versions, plus listed versions
5.15.18+dfsg-1ubuntu15.15.19+dfsg-2ubuntu15.15.19+dfsg-2ubuntu2
None known
qt6-base
Ubuntu:26.04:LTS
All versions, plus listed versions
6.9.2+dfsg-1ubuntu16.9.2+dfsg-26.9.2+dfsg-3ubuntu16.9.2+dfsg-3ubuntu26.9.2+dfsg-46.10.2+dfsg-36.10.2+dfsg-66.10.2+dfsg-7
None known
qtbase-opensource-src
Ubuntu:26.04:LTS
All versions, plus listed versions
5.15.17+dfsg-1ubuntu15.15.17+dfsg-1ubuntu25.15.18+dfsg-1ubuntu1
None known
AusweisApp
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
before 2.6.0-1.1
2.6.0-1.1

What each source reports

CVE List Score used4.6

Out-of-bounds read (buffer over-read) vulnerability in HTTP Cache-Control response header parsing impacts Qt Framework (QtNetwork module)

Out-of-bounds read (buffer over-read) in the HTTP Cache-Control response header parsing in the QtNetwork module in Qt Group Qt 6.0.0 through 6.8.8, and 6.9.0 through 6.11.1, allows remote attackers to cause a denial of service (application crash) via an excessively large Cache-Control header value returned by an untrusted or compromised HTTP server to an application using QNetworkAccessManager. Only the client side of the connection is affected and 32-bit builds are not affected; the out-of-bounds access is read-only, with no information disclosure and no code execution.

Record
CVE-2026-76151
CVSS 4.0
4.6 MediumCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:A
Weakness
CWE-125, CWE-197
Updated
2026-11-02
EUVDEUVD-2026-803854.6

Out-of-bounds read (buffer over-read) in the HTTP Cache-Control response header parsing in the QtNetwork module in Qt Group Qt 6.0.0 through 6.8.8, and 6.9.0 through 6.11.1, allows remote attackers to cause a denial of service (application crash) via an excessively large Cache-Control header value returned by an untrusted or compromised HTTP server to an application using QNetworkAccessManager. Only the client side of the connection is affected and 32-bit builds are not affected; the out-of-bounds access is read-only, with no information disclosure and no code execution.

Record
EUVD-2026-80385
CVSS 4.0
4.6 MediumCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:A
Updated
2026-11-02
GitHub AdvisoriesGHSA-32mm-x94q-6h384.6

Out-of-bounds read (buffer over-read) in the HTTP Cache-Control response header parsing in the...

Out-of-bounds read (buffer over-read) in the HTTP Cache-Control response header parsing in the QtNetwork module in Qt Group Qt 6.0.0 through 6.8.8, and 6.9.0 through 6.11.1, allows remote attackers to cause a denial of service (application crash) via an excessively large Cache-Control header value returned by an untrusted or compromised HTTP server to an application using QNetworkAccessManager. Only the client side of the connection is affected and 32-bit builds are not affected; the out-of-bounds access is read-only, with no information disclosure and no code execution.

Record
GHSA-32mm-x94q-6h38
CVSS 4.0
4.6 MediumCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:X/RE:X/U:X
Weakness
CWE-125
Updated
2026-11-02
NVD4.6

Out-of-bounds read (buffer over-read) in the HTTP Cache-Control response header parsing in the QtNetwork module in Qt Group Qt 6.0.0 through 6.8.8, and 6.9.0 through 6.11.1, allows remote attackers to cause a denial of service (application crash) via an excessively large Cache-Control header value returned by an untrusted or compromised HTTP server to an application using QNetworkAccessManager. Only the client side of the connection is affected and 32-bit builds are not affected; the out-of-bounds access is read-only, with no information disclosure and no code execution.

Record
CVE-2026-76151
CVSS 4.0
4.6 MediumCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:X/RE:X/U:X
Weakness
CWE-125, CWE-197
Updated
2026-11-02
OSVDEBIAN-CVE-2026-761514.6

Out-of-bounds read (buffer over-read) in the HTTP Cache-Control response header parsing in the QtNetwork module in Qt Group Qt 6.0.0 through 6.8.8, and 6.9.0 through 6.11.1, allows remote attackers to cause a denial of service (application crash) via an excessively large Cache-Control header value returned by an untrusted or compromised HTTP server to an application using QNetworkAccessManager. Only the client side of the connection is affected and 32-bit builds are not affected; the out-of-bounds access is read-only, with no information disclosure and no code execution.

Record
DEBIAN-CVE-2026-76151
CVSS 4.0
4.6 MediumCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:X/RE:X/U:X
Updated
2026-11-02
OSVOESA-2026-47217.1

qt6-qtbase security update

Qt is a software toolkit for developing applications.

Security Fix(es):

A NULL pointer dereference vulnerability in the Qt QCborValue to JSON conversion of the Qt Core module.(CVE-2026-105924)

Out-of-bounds read in the QAuthenticator NTLM authentication handling in the Qt Network module in Qt Group Qt allows remote attackers to obtain sensitive information (heap memory contents) or cause a denial of service (application crash) via a crafted NTLM challenge sent by a malicious server or proxy, when an application using QNetworkAccessManager or QTcpSocket authenticates with NTLM.(CVE-2026-105946)

Specially crafted CBOR input passed to QCborValue::fromCbor() in Qt Core can cause an out-of-bounds read, which may crash the application and could expose information.(CVE-2026-107157)

QDomDocument XML parsing is vulnerable to a remotely-triggerable denial-of-service crash when processing untrusted input.(CVE-2026-19248)

Out-of-bounds read (buffer over-read) in the HTTP Cache-Control response header parsing in the QtNetwork module in Qt Group Qt 6.0.0 through 6.8.8, and 6.9.0 through 6.11.1, allows remote attackers to cause a denial of service (application crash) via an excessively large Cache-Control header value returned by an untrusted or compromised HTTP server to an application using QNetworkAccessManager. Only the client side of the connection is affected and 32-bit builds are not affected; the out-of-bounds access is read-only, with no information disclosure and no code execution.(CVE-2026-76151)

Record
OESA-2026-4721
CVSS 4.0
7.1 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/AU:N/R:U/V:D/RE:L
Updated
2026-11-04
Show 9 moreShow less
OSVOESA-2026-47227.1

qt6-qtbase security update

Qt is a software toolkit for developing applications.

Security Fix(es):

QDomDocument XML parsing is vulnerable to a remotely-triggerable denial-of-service crash when processing untrusted input.(CVE-2026-19248)

Out-of-bounds read (buffer over-read) in the HTTP Cache-Control response header parsing in the QtNetwork module in Qt Group Qt 6.0.0 through 6.8.8, and 6.9.0 through 6.11.1, allows remote attackers to cause a denial of service (application crash) via an excessively large Cache-Control header value returned by an untrusted or compromised HTTP server to an application using QNetworkAccessManager. Only the client side of the connection is affected and 32-bit builds are not affected; the out-of-bounds access is read-only, with no information disclosure and no code execution.(CVE-2026-76151)

Record
OESA-2026-4722
CVSS 4.0
7.1 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/AU:N/R:U/V:D/RE:L
Updated
2026-11-04
OSVOESA-2026-47237.1

qt6-qtbase security update

Qt is a software toolkit for developing applications.

Security Fix(es):

A NULL pointer dereference vulnerability in the Qt QCborValue to JSON conversion of the Qt Core module.(CVE-2026-105924)

Out-of-bounds read in the QAuthenticator NTLM authentication handling in the Qt Network module in Qt Group Qt allows remote attackers to obtain sensitive information (heap memory contents) or cause a denial of service (application crash) via a crafted NTLM challenge sent by a malicious server or proxy, when an application using QNetworkAccessManager or QTcpSocket authenticates with NTLM.(CVE-2026-105946)

Specially crafted CBOR input passed to QCborValue::fromCbor() in Qt Core can cause an out-of-bounds read, which may crash the application and could expose information.(CVE-2026-107157)

QDomDocument XML parsing is vulnerable to a remotely-triggerable denial-of-service crash when processing untrusted input.(CVE-2026-19248)

Out-of-bounds read (buffer over-read) in the HTTP Cache-Control response header parsing in the QtNetwork module in Qt Group Qt 6.0.0 through 6.8.8, and 6.9.0 through 6.11.1, allows remote attackers to cause a denial of service (application crash) via an excessively large Cache-Control header value returned by an untrusted or compromised HTTP server to an application using QNetworkAccessManager. Only the client side of the connection is affected and 32-bit builds are not affected; the out-of-bounds access is read-only, with no information disclosure and no code execution.(CVE-2026-76151)

Record
OESA-2026-4723
CVSS 4.0
7.1 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/AU:N/R:U/V:D/RE:L
Updated
2026-11-04
OSVRHSA-2026:823827.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:82382
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-13
OSVRHSA-2026:827347.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:82734
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-13
OSVRHSA-2026:986367.5

Red Hat Security Advisory: qt6-qtbase security update

Record
RHSA-2026:98636
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-13
OSVRHSA-2026:991557.5

Red Hat Security Advisory: qt6-qtbase security update

Record
RHSA-2026:99155
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-13
OSVRLSA-2026:986367.5

Important: qt6-qtbase security update

Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling.

Security Fix(es):

  • qt5-qtbase: qt6-qtbase: qt: Denial of Service via excessively large HTTP Cache-Control header (CVE-2026-76151)

  • qt: qt: Denial of Service via crafted XML parsing in QXmlStreamReader (CVE-2026-16762)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:98636
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-13
OSVUBUNTU-CVE-2026-761514.6

Out-of-bounds read (buffer over-read) in the HTTP Cache-Control response header parsing in the QtNetwork module in Qt Group Qt 6.0.0 through 6.8.8, and 6.9.0 through 6.11.1, allows remote attackers to cause a denial of service (application crash) via an excessively large Cache-Control header value returned by an untrusted or compromised HTTP server to an application using QNetworkAccessManager. Only the client side of the connection is affected and 32-bit builds are not affected; the out-of-bounds access is read-only, with no information disclosure and no code execution.

Record
UBUNTU-CVE-2026-76151
CVSS 4.0
4.6 MediumCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:A
Updated
2026-11-02
OSVopenSUSE-SU-2026:12071-1No score

AusweisApp-2.6.0-1.1 on GA media

These are all security issues fixed in the AusweisApp-2.6.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:12071-1
Updated
2026-11-02

History

History
RecordedChangedSources
affected, aliases, referencesOSV
affected, aliases, referencesOSV
affected
affected, aliases, facts, referencesOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 34 moreShow less
This page doesn't list everything

Left out here: 40 versions. The JSON record has them.

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open