QT vulnerabilities
48 CVEs and advisories name QT as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-9499Out-of-bounds read in QTextCodec::codecForName() in Qt
- CVE-2026-12379URL Redirection to Untrusted Site ('Open Redirect') vulnerability in the Dashboard OAuth/OIDC implementation of Axivion
- CVE-2026-12593Privilege escalation via forged API token creation in Axivion Dashboard OIDC/OAuth2/SSO subsystem
- CVE-2025-14575Uncontrolled Search Path Element in Qt Network OpenSSL TLS backend allows rogue CA certificate loading
- CVE-2026-6210Type confusion and heap-buffer-overflow in Qt SVG marker handling causing application crash
- CVE-2025-14576Possible QML code injection in VectorImage component
- CVE-2025-12385Improper validation of <img> tag size in Text component parser
- CVE-2025-23050QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read (or division by zero).
- CVE-2025-6338Possible denial of service with multiple incoming connections to a Schannel based server with a TLS backend
- CVE-2025-10729Use-after-free vulnerability in Qt SVG qsvghandler.cpp allows denial of service via crafted SVG
- CVE-2025-10728Uncontrolled recursion in Qt SVG module
- CVE-2025-5992Passing values outside of expected range to QColorTransferGenericFunction can cause a denial of service
- CVE-2025-5991Use after free in QHttp2ProtocolHandler
- CVE-2025-5683When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash.
- CVE-2025-5455Possible denial of service when passing malformed data in a URL to qDecodeDataUrl
- CVE-2025-4211Improper Link Resolution Before File Access in QFileSystemEngine on Windows
- CVE-2025-3512Buffer overflow in QTextMarkdownImporter
- CVE-2025-30348encodeText in QDom in Qt before 6.8.0 has a complex algorithm involving XML string copy and inline replacement of parts of a string (with re