Qt vulnerabilities

Products

• Qt 95
• Axivion 2
• Qtbase 2
• For Mcus 2
• Framework 2

Newest

• qt Integer truncation vulnerability in QTextCodec conversion functions impacts Qt Framework CVE-2026-107479 1.7 LowNovember 4, 2026
• qt framework Resource exhaustion vulnerability in HTTP request handling impacts Qt HTTP Server (QHttpServer) CVE-2026-110944 2.7 LowNovember 4, 2026
• qt Out-of-bounds read vulnerability in CoAP message parsing impacts Qt CoAP CVE-2026-103653 6.7 MediumNovember 3, 2026
• qt Integer overflow vulnerability in XML parsing functionality of Qt5Compat impacts Qt CVE-2026-100140 1.9 LowNovember 2, 2026
• qt Memory corruption vulnerability in QMqttClient impacts Qt MQTT CVE-2026-107457 2.3 LowNovember 2, 2026
• qt framework Out-of-bounds write vulnerability in the assimp scene import plugin of Qt3D impacts Qt Framework CVE-2026-111487 Fix available 4.3 MediumOctober 30, 2026
• qt NULL pointer dereference vulnerability in QCborValue to JSON conversion impacts Qt CVE-2026-105924 Fix available 4.3 MediumOctober 30, 2026
• qt Out-of-bounds write vulnerability in QTextCodec iconv-based encoding impacts Qt CVE-2026-107590 1.9 LowOctober 27, 2026
• qt Out-of-bounds read vulnerability in QTextCodec TSCII encoding impacts Qt CVE-2026-107472 Fix available 4.3 MediumOctober 27, 2026
• qt Out-of-bounds read vulnerability in NTLM authentication handling impacts Qt CVE-2026-105946 Fix available 5.3 MediumOctober 27, 2026
• qt Out-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt Framework CVE-2026-107157 Fix available 2.0 LowOctober 26, 2026
• qt Null pointer dereference vulnerability in QNetworkAccessManager impacts Qt CVE-2026-96432 2.1 LowOctober 26, 2026
• qt Use-after-free vulnerability in QNetworkAccessManager HTTP/2 support impacts Qt CVE-2026-95620 2.1 LowOctober 23, 2026
• qt Denial-of-service vulnerability in the Qt Core QXmlStream parser (QXmlStreamReader) impacts Qt CVE-2026-16762 Fix available 8.7 HighOctober 23, 2026
• qt Null-pointer dereference in QTriangulator reachable through VectorImage CVE-2026-105923 4.0 MediumOctober 21, 2026
• qt QBinaryJson::fromBinaryData() integer overflow leading to OOB read CVE-2026-101201 Fix available 4.3 MediumOctober 20, 2026
• qt Denial-of-service vulnerability in the SVG parser and renderer impacts Qt CVE-2026-8168 Fix available 7.1 HighOctober 19, 2026
• qt for mcus Memory corruption (double free / use-after-free) vulnerability in core string handling impacts Qt for MCUs CVE-2026-94370 6.5 MediumOctober 14, 2026
• qt for mcus An empty <img> attribute value in styled text triggers a parser error that halts the device. CVE-2026-19395 Fix available 6.6 MediumOctober 5, 2026
• qt for mcus Out-of-bounds read vulnerability in string formatting impacts Qt for MCUs CVE-2026-95509 8.8 HighSeptember 29, 2026
• qt Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module CVE-2026-79680 4.5 MediumSeptember 24, 2026
• qt Out-of-bounds read vulnerability in Context2D.path and PathSvg.path properties impacts Qt Quick CVE-2026-79616 Fix available 0.6 LowSeptember 23, 2026
• qt Denial-of-service (stack-exhaustion) vulnerability in QXmlStreamReader::readElementText() impacts Qt CVE-2026-78253 Fix available 2.3 LowSeptember 22, 2026
• qt Out-of-bounds read (buffer over-read) vulnerability in HTTP Cache-Control response header parsing impacts Qt Framework (QtNetwork module) CVE-2026-76151 Fix available 4.6 MediumSeptember 16, 2026
• qt Unbounded recursion vulnerability in the QDomNode destructor of Qt XML impacts Qt CVE-2026-19248 Fix available 7.1 HighSeptember 16, 2026
• qt Out-of-bounds read and integer underflow vulnerability in QNdefNfcTextRecord impacts Qt NFC module CVE-2026-13326 Fix available 6.9 MediumSeptember 11, 2026
• qt Uncontrolled recursion in QDomDocument/QDomNode serialization causes stack exhaustion (QtXml) CVE-2026-11573 Fix available 7.1 HighSeptember 8, 2026
• qt XML injection vulnerability in QDom comment, CDATA and processing-instruction serialization CVE-2026-15037 Fix available 2.9 LowJuly 23, 2026
• qt Out-of-bounds read in QTextCodec::codecForName() in Qt CVE-2026-9499 Fix available 6.3 MediumJuly 21, 2026
• qt axivion URL Redirection to Untrusted Site ('Open Redirect') vulnerability in the Dashboard OAuth/OIDC implementation of Axivion CVE-2026-12379 6.8 MediumJuly 16, 2026
• qt axivion Privilege escalation via forged API token creation in Axivion Dashboard OIDC/OAuth2/SSO subsystem CVE-2026-12593 8.7 HighJuly 9, 2026
• qt Uncontrolled Search Path Element in Qt Network OpenSSL TLS backend allows rogue CA certificate loading CVE-2025-14575 Fix available 1.8 LowMay 19, 2026
• qt Type confusion and heap-buffer-overflow in Qt SVG marker handling causing application crash CVE-2026-6210 Fix available 8.7 HighMay 6, 2026
• qt, qt qtdeclarative, red hat multicluster global hub +10 more +12 more Possible QML code injection in VectorImage component CVE-2025-14576 Fix available 7.4 HighApril 30, 2026
• qt Improper validation of <img> tag size in Text component parser CVE-2025-12385 Fix available 8.7 HighDecember 3, 2025
• qt Possible denial of service with multiple incoming connections to a Schannel based server with a TLS backend CVE-2025-6338 9.2 CriticalOctober 16, 2025
• qt Use-after-free vulnerability in Qt SVG qsvghandler.cpp allows denial of service via crafted SVG CVE-2025-10729 Fix available 9.4 CriticalOctober 3, 2025
• qt Uncontrolled recursion in Qt SVG module CVE-2025-10728 Fix available 9.4 CriticalOctober 3, 2025
• qt Passing values outside of expected range to QColorTransferGenericFunction can cause a denial of service CVE-2025-5992 Fix available 2.3 LowJuly 11, 2025
• qt Use after free in QHttp2ProtocolHandler CVE-2025-5991 2.1 LowJune 11, 2025
• qt When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash... CVE-2025-5683 Fix available 5.1 MediumJune 5, 2025
• qt Possible denial of service when passing malformed data in a URL to qDecodeDataUrl CVE-2025-5455 Fix available 8.4 HighJune 2, 2025
• qt Improper Link Resolution Before File Access in QFileSystemEngine on Windows CVE-2025-4211 7.3 HighMay 16, 2025
• qt Buffer overflow in QTextMarkdownImporter CVE-2025-3512 Fix available 4.8 MediumApril 11, 2025
• qt encodeText in QDom in Qt before 6.8.0 has a complex algorithm involving XML string copy and... CVE-2025-30348 Fix available 5.8 MediumMarch 21, 2025
• qt QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to... CVE-2025-23050 Fix available 3.1 LowJanuary 23, 2025
• qt An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x... CVE-2024-39936 Fix available 8.6 HighJuly 4, 2024
• qt, qt network authorization, fedoraproject fedora +2 more QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through... CVE-2024-36048 Fix available 9.8 CriticalMay 18, 2024
• qt An issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.12, 6.3... CVE-2024-25580 Fix available 6.2 MediumMarch 27, 2024
• qt In Qt before 6.5.6 and 6.6.x before 6.6.3, the wasm component may access QNetworkReply header... CVE-2024-30161 Fix available 6.5 MediumMarch 24, 2024
• Show olderLoading…