qt5-qtbase: qt6-qtbase: qt: Denial of Service via excessively large HTTP Cache-Control header

A flaw was found in the QtNetwork module of the Qt Framework. This out-of-bounds read vulnerability allows a remote attacker to cause a denial of service application crash. This occurs when an application using QNetworkAccessManager processes an excessively large HTTP Cache-Control header value...

qt5-qtbase: qt6-qtbase: qt: Denial of Service via excessively large HTTP Cache-Control header

A flaw was found in the QtNetwork module of the Qt Framework. This out-of-bounds read vulnerability allows a remote attacker to cause a denial of service application crash. This occurs when an application using QNetworkAccessManager processes an excessively large HTTP Cache-Control header value...

CVE-2026-95620

A flaw was found in Qt. A use-after-free vulnerability in the HTTP/2 client implementation of the QNetworkAccessManager component allows a malicious or compromised HTTP/2 server to crash the client application. This flaw primarily results in a Denial of Service DoS...

Qt 6.8.x < 6.8.10 / 6.9.0 < 6.11.3 Multiple Vulnerabilities

The version of Qt installed on the remote host is 6.8.x prior to 6.8.10, or 6.9.0 or later prior to 6.11.3. It is, therefore, affected by multiple vulnerabilities: - A malicious or compromised HTTP/2 server withholding SETTINGS ACK can send RSTSTREAM on a completed stream, planting a null pointer...

SUSE CVE-2026-96432

A malicious or compromised HTTP/2 server withholding SETTINGS ACK can send RSTSTREAM on a completed stream, planting a null pointer, and then send a PUSHPROMISE for that stream, causing a null pointer dereference in the QNetworkAccessManager class of the Qt Network module that crashes the...

CVE-2026-105946

The Qt Network module in Qt Group Qt is vulnerable to an out-of-bounds read within the QAuthenticator NTLM authentication handling . A remote attacker can exploit this by sending a crafted NTLM challenge via a malicious server or proxy. If an application uses QNetworkAccessManager or QTcpSocket t...

CVE-2026-105946 Out-of-bounds read vulnerability in NTLM authentication handling impacts Qt

Out-of-bounds read in the QAuthenticator NTLM authentication handling in the Qt Network module in Qt Group Qt allows remote attackers to obtain sensitive information heap memory contents or cause a denial of service application crash via a crafted NTLM challenge sent by a malicious server or prox...

SUSE CVE-2026-95620

A use-after-free vulnerability in the Qt QNetworkAccessManager HTTP/2 client support of the Qt Network module allows a malicious or compromised HTTP/2 server to cause the client application to crash, affecting availability...

DEBIAN-CVE-2026-96432

A malicious or compromised HTTP/2 server withholding SETTINGS ACK can send RSTSTREAM on a completed stream, planting a null pointer, and then send a PUSHPROMISE for that stream, causing a null pointer dereference in the QNetworkAccessManager class of the Qt Network module that crashes the...

CVE-2026-96432

A malicious or compromised HTTP/2 server withholding SETTINGS ACK can send RSTSTREAM on a completed stream, planting a null pointer, and then send a PUSHPROMISE for that stream, causing a null pointer dereference in the QNetworkAccessManager class of the Qt Network module that crashes the...

CVE-2026-96432

A malicious or compromised HTTP/2 server withholding SETTINGS ACK can send RSTSTREAM on a completed stream, planting a null pointer, and then send a PUSHPROMISE for that stream, causing a null pointer dereference in the QNetworkAccessManager class of the Qt Network module that crashes the...

UBUNTU-CVE-2026-96432

A malicious or compromised HTTP/2 server withholding SETTINGS ACK can send RSTSTREAM on a completed stream, planting a null pointer, and then send a PUSHPROMISE for that stream, causing a null pointer dereference in the QNetworkAccessManager class of the Qt Network module that crashes the...

CVE-2026-96432 Null pointer dereference vulnerability in QNetworkAccessManager impacts Qt

A malicious or compromised HTTP/2 server withholding SETTINGS ACK can send RSTSTREAM on a completed stream, planting a null pointer, and then send a PUSHPROMISE for that stream, causing a null pointer dereference in the QNetworkAccessManager class of the Qt Network module that crashes the...

CVE-2026-96432 Null pointer dereference vulnerability in QNetworkAccessManager impacts Qt

A malicious or compromised HTTP/2 server withholding SETTINGS ACK can send RSTSTREAM on a completed stream, planting a null pointer, and then send a PUSHPROMISE for that stream, causing a null pointer dereference in the QNetworkAccessManager class of the Qt Network module that crashes the...

EUVD-2026-109779

A malicious or compromised HTTP/2 server withholding SETTINGS ACK can send RSTSTREAM on a completed stream, planting a null pointer, and then send a PUSHPROMISE for that stream, causing a null pointer dereference in the QNetworkAccessManager class of the Qt Network module that crashes the...

CVE-2026-96432

A null pointer dereference vulnerability exists in the QNetworkAccessManager class of the Qt Network module . A malicious or compromised HTTP/2 server can exploit this by withholding a SETTINGS ACK and sending an RST_STREAM on a completed stream, which plants a null pointer. Subsequent delivery o...

Linux Distros Unpatched Vulnerability : CVE-2026-96432

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A malicious or compromised HTTP/2 server withholding SETTINGS ACK can send RSTSTREAM on a completed stream, planting a null pointer, and then send a PUSHPROMISE...

Improper Qt exception handling vulnerability

Vulnerabilities related to improper exception handling exist in Qt versions 6.8.0 through 6.8.9 and 6.9.0 through 6.11.2. These vulnerabilities stem from the QNetworkAccessManager class in the Qt Network module failing to properly handle scenarios where a malicious or infected HTTP/2 server sends...

PT-2026-123283

A malicious or compromised HTTP/2 server withholding SETTINGS ACK can send RST STREAM on a completed stream, planting a null pointer, and then send a PUSH PROMISE for that stream, causing a null pointer dereference in the QNetworkAccessManager class of the Qt Network module that crashes the...

Linux Distros Unpatched Vulnerability : CVE-2026-95620

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free vulnerability in the Qt QNetworkAccessManager HTTP/2 client support of the Qt Network module allows a malicious or compromised HTTP/2 server to...