QT vulnerabilities
48 CVEs and advisories name QT as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-116337Uncontrolled resource consumption vulnerability in HTTP response handling of Qt Network impacts Qt Framework
- CVE-2026-114366Information disclosure vulnerability in authentication handling of QWebSocket impacts Qt Framework
- CVE-2026-107479Integer truncation vulnerability in QTextCodec conversion functions impacts Qt Framework
- CVE-2026-110944Resource exhaustion vulnerability in HTTP request handling impacts Qt HTTP Server (QHttpServer)
- CVE-2026-103653Out-of-bounds read vulnerability in CoAP message parsing impacts Qt CoAP
- CVE-2026-100140Integer overflow vulnerability in XML parsing functionality of Qt5Compat impacts Qt
- CVE-2026-107457Memory corruption vulnerability in QMqttClient impacts Qt MQTT
- CVE-2026-111487Out-of-bounds write vulnerability in the assimp scene import plugin of Qt3D impacts Qt Framework
- CVE-2026-105924NULL pointer dereference vulnerability in QCborValue to JSON conversion impacts Qt
- CVE-2026-107590Out-of-bounds write vulnerability in QTextCodec iconv-based encoding impacts Qt
- CVE-2026-107472Out-of-bounds read vulnerability in QTextCodec TSCII encoding impacts Qt
- CVE-2026-105946Out-of-bounds read vulnerability in NTLM authentication handling impacts Qt
- CVE-2026-107157Out-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt Framework
- CVE-2026-96432Null pointer dereference vulnerability in QNetworkAccessManager impacts Qt
- CVE-2026-95620Use-after-free vulnerability in QNetworkAccessManager HTTP/2 support impacts Qt
- CVE-2026-16762Denial-of-service vulnerability in the Qt Core QXmlStream parser (QXmlStreamReader) impacts Qt
- CVE-2026-105923Null-pointer dereference in QTriangulator reachable through VectorImage
- CVE-2026-101201QBinaryJson::fromBinaryData() integer overflow leading to OOB read
- CVE-2026-8168Denial-of-service vulnerability in the SVG parser and renderer impacts Qt
- CVE-2026-94370Memory corruption (double free / use-after-free) vulnerability in core string handling impacts Qt for MCUs
- CVE-2026-19395An empty <img> attribute value in styled text triggers a parser error that halts the device.
- CVE-2026-95509Out-of-bounds read vulnerability in string formatting impacts Qt for MCUs
- CVE-2026-79680Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module
- CVE-2026-78253Denial-of-service (stack-exhaustion) vulnerability in QXmlStreamReader::readElementText() impacts Qt
- CVE-2026-79616Out-of-bounds read vulnerability in Context2D.path and PathSvg.path properties impacts Qt Quick
- CVE-2026-76151Out-of-bounds read (buffer over-read) vulnerability in HTTP Cache-Control response header parsing impacts Qt Framework (QtNetwork module)
- CVE-2026-19248Unbounded recursion vulnerability in the QDomNode destructor of Qt XML impacts Qt
- CVE-2026-13326Out-of-bounds read and integer underflow vulnerability in QNdefNfcTextRecord impacts Qt NFC module
- CVE-2026-11573Uncontrolled recursion in QDomDocument/QDomNode serialization causes stack exhaustion (QtXml)
- CVE-2026-15037XML injection vulnerability in QDom comment, CDATA and processing-instruction serialization