Security releases
Researcher credits in vendor advisories
Vendors name researchers in their own advisories. Find your line and claim it. It counts on your profile right away and gets a BugRater ID you can quote.
Vendor
-
Qt CVE-2026-116337
Uncontrolled resource consumption vulnerability in the Qt Framework HTTP response handling functionality of the Qt Network module.
0 CVEs and 0 credit lines.
-
Qt CVE-2026-114366
An information disclosure vulnerability in the Qt Framework QWebSocket authentication handling of the Qt WebSockets module.
0 CVEs and 0 credit lines.
-
Qt CVE-2026-107479
An integer truncation vulnerability in the QTextCodec conversion functions of the Qt 5 Core Compatibility APIs module impacts the Qt Framework. An application u
0 CVEs and 0 credit lines.
-
Qt CVE-2026-110944
Resource exhaustion vulnerability in the HTTP request handling of the QHttpServer component of Qt HTTP Server.
0 CVEs and 0 credit lines.
-
Qt CVE-2026-103653
An out-of-bounds read vulnerability in the Qt CoAP message parsing (QCoapInternalReply::createFromFrame()) of the Qt CoAP module. Processing a malformed CoAP me
0 CVEs and 0 credit lines.
-
Qt CVE-2026-100140
An integer overflow vulnerability in the Qt XML parsing (Qt5Compat / QXmlSimpleReader) functionality of Qt.
0 CVEs and 0 credit lines.
-
Qt CVE-2026-107457
A memory corruption vulnerability in the QMqttClient class of the Qt MQTT module. Under certain MQTT 5 connection settings between client and server, QMqttClien
0 CVEs and 0 credit lines.
-
Qt CVE-2026-111487
An out-of-bounds write vulnerability in the Qt Framework assimp scene import plugin of the Qt3D module.
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Qt CVE-2026-105924
A NULL pointer dereference vulnerability in the Qt QCborValue to JSON conversion of the Qt Core module.
0 CVEs and 0 credit lines.
-
Qt CVE-2026-107590
An out-of-bounds write vulnerability in the Qt QTextCodec iconv-based encoding of the Qt 5 Compatibility APIs module (Qt Core in Qt 5 and earlier) impacts Qt. U
0 CVEs and 0 credit lines.
-
Qt CVE-2026-107472
An out-of-bounds read vulnerability in the QTextCodec TSCII encoding of the Qt 5 Compatibility APIs module (Qt Core in Qt 5 and earlier) impacts Qt. Application
0 CVEs and 0 credit lines.
-
Qt CVE-2026-105946
Out-of-bounds read in the QAuthenticator NTLM authentication handling in the Qt Network module in Qt Group Qt allows remote attackers to obtain sensitive inform
0 CVEs and 0 credit lines.
-
Qt CVE-2026-107157
Out-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt Framework.
0 CVEs and 0 credit lines.
-
Qt CVE-2026-96432
A malicious or compromised HTTP/2 server withholding SETTINGS ACK can send RST_STREAM on a completed stream, planting a null pointer, and then send a PUSH_PROMI
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit
-
Qt CVE-2026-16762
An attacker able to supply a crafted XML document to an application using QXmlStreamReader can cause disproportionate CPU consumption during parsing, making the
0 CVEs and 0 credit lines.
-
Qt CVE-2026-101201
A malformed header in the binary file fed to QBinaryJson::fromBinaryData() can cause undefined behaviour because of out-of-bounds read.
0 CVEs and 0 credit lines.
-
Qt CVE-2026-8168
Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module (QtSvg) in Qt Group Qt allows attackers to cause a denial of service (application cra
0 CVEs and 0 credit lines.