qtbase: qt5-qtbase: qt6-qtbase: qtbase: Denial of Service via uncontrolled recursion in XML serialization

A flaw was found in qtbase. Uncontrolled recursion in Qt's QDomDocument serialization QtXml allows a remote attacker to provide deeply nested untrusted XML, leading to stack exhaustion. This can cause the application to crash, resulting in a Denial of Service DoS...

OESA-2026-4212 qt5-qtbase security update

Qt is a software toolkit for developing applications. Security Fixes: QDomDocument XML parsing is vulnerable to a remotely-triggerable denial-of-service crash when processing untrusted input.CVE-2026-19248...

Amazon Linux 2 : qt5-qtbase (ALAS-2026-3951)

The version of qt5-qtbase installed on the remote host is prior to 5.15.3-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3951 advisory. Uncontrolled recursion in Qt's QDomDocument serialization QtXml lets deeply nested untrusted XML crash the app via sta...

Important: qt5-qtbase

Issue Overview: Uncontrolled recursion in Qt's QDomDocument serialization QtXml lets deeply nested untrusted XML crash the app via stack exhaustion DoS only. CVE-2026-11573 QDomDocument XML parsing is vulnerable to a remotely-triggerable denial-of-service crash when processing untrusted input...

Linux Distros Unpatched Vulnerability : CVE-2026-19248

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - QDomDocument XML parsing is vulnerable to a remotely-triggerable denial-of-service crash when processing untrusted input. CVE-2026-19248 Note that Nessus relies...

SUSE CVE-2026-19248

QDomDocument XML parsing is vulnerable to a remotely-triggerable denial-of-service crash when processing untrusted input...

CVE-2026-19248

QDomDocument XML parsing is vulnerable to a remotely-triggerable denial-of-service crash when processing untrusted input...

DEBIAN-CVE-2026-19248

QDomDocument XML parsing is vulnerable to a remotely-triggerable denial-of-service crash when processing untrusted input...

CVE-2026-19248

QDomDocument XML parsing is vulnerable to a remotely-triggerable denial-of-service crash when processing untrusted input...

UBUNTU-CVE-2026-19248

QDomDocument XML parsing is vulnerable to a remotely-triggerable denial-of-service crash when processing untrusted input...

CVE-2026-19248

QDomDocument XML parsing is vulnerable to a remotely-triggerable denial-of-service crash when processing untrusted input...

CVE-2026-19248

QDomDocument XML parsing is vulnerable to a remotely-triggerable denial-of-service crash when processing untrusted input...

CVE-2026-19248 Unbounded recursion vulnerability in the QDomNode destructor of Qt XML impacts Qt

QDomDocument XML parsing is vulnerable to a remotely-triggerable denial-of-service crash when processing untrusted input...

EUVD-2026-80223

QDomDocument XML parsing is vulnerable to a remotely-triggerable denial-of-service crash when processing untrusted input...

CVE-2026-19248: Uncontrolled Recursion

QDomDocument XML parsing is vulnerable to a remotely-triggerable denial-of-service crash when processing untrusted input...

SUSE CVE-2026-11573

Uncontrolled recursion CWE-674 in the QDomDocument/QDomNode serialization path of the Qt XML module QtXml, qtbase. QDomElementPrivate::save and QDomNodePrivate::save recurse mutually, consuming one stack frame per level of element nesting with no depth limit, no configurable bound and no error...

CVE-2026-11573

A flaw was found in qtbase. Uncontrolled recursion in Qt's QDomDocument serialization QtXml allows a remote attacker to provide deeply nested untrusted XML, leading to stack exhaustion. This can cause the application to crash, resulting in a Denial of Service DoS. Mitigation To mitigate this issu...

Linux Distros Unpatched Vulnerability : CVE-2026-11573

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled recursion CWE-674 in the QDomDocument/QDomNode serialization path of the Qt XML module QtXml, qtbase. QDomElementPrivate::save and...

DEBIAN-CVE-2026-11573

Uncontrolled recursion CWE-674 in the QDomDocument/QDomNode serialization path of the Qt XML module QtXml, qtbase. QDomElementPrivate::save and QDomNodePrivate::save recurse mutually, consuming one stack frame per level of element nesting with no depth limit, no configurable bound and no error...

AZL-100947 CVE-2026-11573 affecting package qtbase for versions less than 6.6.3-6

Uncontrolled recursion CWE-674 in the QDomDocument/QDomNode serialization path of the Qt XML module QtXml, qtbase. QDomElementPrivate::save and QDomNodePrivate::save recurse mutually, consuming one stack frame per level of element nesting with no depth limit, no configurable bound and no error...