Skip to contentThe Qt Company Qt vulnerabilities
- qtInteger overflow vulnerability in QTextCodec fromUnicode() and toUnicode() impacts QtCVE-2026-1036451.1 Low
- qtUncontrolled recursion vulnerability in QXmlSimpleReader XML parsing impacts QtCVE-2026-978454.3 Medium
- qtNULL pointer dereference vulnerability in QDomDocument::setContent() XML parsing impacts QtCVE-2026-822921.9 Low
- qtInteger truncation vulnerability in QTextCodec conversion functions impacts Qt FrameworkCVE-2026-107479Fix available1.7 Low
- qtOut-of-bounds read vulnerability in CoAP message parsing impacts Qt CoAPCVE-2026-103653Fix available6.7 Medium
- qtInteger overflow vulnerability in XML parsing functionality of Qt5Compat impacts QtCVE-2026-100140Fix available1.9 Low
- qtMemory corruption vulnerability in QMqttClient impacts Qt MQTTCVE-2026-1074572.3 Low
- qtNULL pointer dereference vulnerability in QCborValue to JSON conversion impacts QtCVE-2026-105924Fix available4.3 Medium
- qtOut-of-bounds write vulnerability in QTextCodec iconv-based encoding impacts QtCVE-2026-107590Fix available1.9 Low
- qtOut-of-bounds read vulnerability in QTextCodec TSCII encoding impacts QtCVE-2026-107472Fix available4.3 Medium
- qtOut-of-bounds read vulnerability in NTLM authentication handling impacts QtCVE-2026-105946Fix available5.3 Medium
- qtOut-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt FrameworkCVE-2026-107157Fix available2.0 Low
- qtNull pointer dereference vulnerability in QNetworkAccessManager impacts QtCVE-2026-964322.1 Low
- qtUse-after-free vulnerability in QNetworkAccessManager HTTP/2 support impacts QtCVE-2026-956202.1 Low
- qtNull-pointer dereference in QTriangulator reachable through VectorImageCVE-2026-1059234.0 Medium
- qtDenial-of-service vulnerability in the Qt Core QXmlStream parser (QXmlStreamReader) impacts QtCVE-2026-16762Fix available8.7 High
- qtQBinaryJson::fromBinaryData() integer overflow leading to OOB readCVE-2026-101201Fix available4.3 Medium
- qtDenial-of-service vulnerability in the SVG parser and renderer impacts QtCVE-2026-8168Fix available7.1 High
- qtAuthentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server moduleCVE-2026-796804.5 Medium
- qtOut-of-bounds read vulnerability in Context2D.path and PathSvg.path properties impacts Qt QuickCVE-2026-79616Fix available0.6 Low
- qtDenial-of-service (stack-exhaustion) vulnerability in QXmlStreamReader::readElementText() impacts QtCVE-2026-78253Fix available2.3 Low
- qtOut-of-bounds read (buffer over-read) vulnerability in HTTP Cache-Control response header parsing impacts Qt Framework (QtNetwork module)CVE-2026-76151Fix available4.6 Medium
- qtUnbounded recursion vulnerability in the QDomNode destructor of Qt XML impacts QtCVE-2026-19248Fix available7.1 High
- qtOut-of-bounds read and integer underflow vulnerability in QNdefNfcTextRecord impacts Qt NFC moduleCVE-2026-13326Fix available6.9 Medium
- qtUncontrolled recursion in QDomDocument/QDomNode serialization causes stack exhaustion (QtXml)CVE-2026-11573Fix available7.1 High
- qtXML injection vulnerability in QDom comment, CDATA and processing-instruction serializationCVE-2026-15037Fix available2.9 Low
- qtOut-of-bounds read in QTextCodec::codecForName() in QtCVE-2026-9499Fix available6.3 Medium
- qtUncontrolled Search Path Element in Qt Network OpenSSL TLS backend allows rogue CA certificate loadingCVE-2025-14575Fix available1.8 Low
- qtType confusion and heap-buffer-overflow in Qt SVG marker handling causing application crashCVE-2026-6210Fix available8.7 High
- qt, qt qtdeclarative, red hat multicluster global hub +10 more +12 morePossible QML code injection in VectorImage componentCVE-2025-14576Fix available7.4 High
- qtImproper validation of <img> tag size in Text component parserCVE-2025-12385Fix available8.7 High
- qtPossible denial of service with multiple incoming connections to a Schannel based server with a TLS backendCVE-2025-63389.2 Critical
- qtUse-after-free vulnerability in Qt SVG qsvghandler.cpp allows denial of service via crafted SVGCVE-2025-10729Fix available9.4 Critical
- qtUncontrolled recursion in Qt SVG moduleCVE-2025-10728Fix available9.4 Critical
- qtPassing values outside of expected range to QColorTransferGenericFunction can cause a denial of serviceCVE-2025-5992Fix available2.3 Low
- qtUse after free in QHttp2ProtocolHandlerCVE-2025-59912.1 Low
- qtWhen loading a specifically crafted ICNS format image file in QImage then it will trigger a crash...CVE-2025-5683Fix available5.1 Medium
- qtPossible denial of service when passing malformed data in a URL to qDecodeDataUrlCVE-2025-5455Fix available8.4 High
- qtImproper Link Resolution Before File Access in QFileSystemEngine on WindowsCVE-2025-42117.3 High
- qtBuffer overflow in QTextMarkdownImporterCVE-2025-3512Fix available4.8 Medium
- qtencodeText in QDom in Qt before 6.8.0 has a complex algorithm involving XML string copy and...CVE-2025-30348Fix available5.8 Medium
- qtQLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to...CVE-2025-23050Fix available3.1 Low
- qtAn integer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2....CVE-2022-40983Fix available8.8 High
- qtA buffer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2. A...CVE-2022-43591Fix available8.8 High
- qtA flaw was found in Qt. An out-of-bounds read vulnerability was found in QRadialFetchSimd in qt...CVE-2021-3481Fix available7.1 High
- qt, the qt company qt for android +1 moreA vulnerability in applications created using Qt for Android prior to 5.9.3 allows attackers to...CVE-2017-109055.3 Medium
- qt, the qt company qt for android +1 moreQt for Android prior to 5.9.0 allows remote attackers to execute arbitrary OS commands via...CVE-2017-109049.8 Critical