EUVD-2026-75974

An out-of-bounds read in Qt NFC's language code length parsing allows a physically proximate attacker to cause a denial of service or limited memory disclosure via a crafted NFC tag...

CVE-2026-13326 Out-of-bounds read and integer underflow vulnerability in QNdefNfcTextRecord impacts Qt NFC module

An out-of-bounds read in Qt NFC's language code length parsing allows a physically proximate attacker to cause a denial of service or limited memory disclosure via a crafted NFC tag...

CVE-2026-13326

CVE-2026-13326 affects Qt NFC 's QNdefNfcTextRecord component, where an out-of-bounds read in language code length parsing (combined with an integer underflow) allows a physically proximate attacker to trigger a denial of service or limited memory disclosure via a crafted NFC tag. The CVSS 4.0 sc...

CVE-2026-13326 Out-of-bounds read and integer underflow vulnerability in QNdefNfcTextRecord impacts Qt NFC module

An out-of-bounds read in Qt NFC's language code length parsing allows a physically proximate attacker to cause a denial of service or limited memory disclosure via a crafted NFC tag...

CVE-2026-13326: Out-of-bounds Read

An out-of-bounds read in Qt NFC's language code length parsing allows a physically proximate attacker to cause a denial of service or limited memory disclosure via a crafted NFC tag...

PT-2026-89771

Name of the Vulnerable Software and Affected Versions Qt NFC affected versions not specified Description An out-of-bounds read occurs during the parsing of language code lengths. A physically proximate attacker can exploit this by using a crafted NFC tag to trigger a denial of service or limited...

qt: Qt: Denial of Service via out-of-bounds read in text codec handling

A flaw was found in Qt, a popular software development framework. This vulnerability, an out-of-bounds read, occurs in the QTextCodec::codecForName function when it processes specially crafted input that is not properly terminated. An attacker could exploit this to cause the application to select...

Important: Red Hat Security Advisory: qt5-qtbase security update

An update for qt5-qtbase is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

qt: Qt: Denial of Service via out-of-bounds read in text codec handling

A flaw was found in Qt, a popular software development framework. This vulnerability, an out-of-bounds read, occurs in the QTextCodec::codecForName function when it processes specially crafted input that is not properly terminated. An attacker could exploit this to cause the application to select...

qt: Qt: Denial of Service via out-of-bounds read in text codec handling

A flaw was found in Qt, a popular software development framework. This vulnerability, an out-of-bounds read, occurs in the QTextCodec::codecForName function when it processes specially crafted input that is not properly terminated. An attacker could exploit this to cause the application to select...

CVE-2026-11573 QDomDocument::toByteArray() crashes when parsing svg file

Uncontrolled recursion in Qt's QDomDocument serialization QtXml lets deeply nested untrusted XML crash the app via stack exhaustion DoS only...

CVE-2026-11573

CVE-2026-11573 affects Qt's QtXml module, specifically QDomDocument::toByteArray(). The root cause is uncontrolled recursion when serializing deeply nested untrusted XML (e.g., an SVG file), which exhausts the call stack and crashes the application. The impact is limited to denial of service (ava...

EUVD-2026-72717

Uncontrolled recursion in Qt's QDomDocument serialization QtXml lets deeply nested untrusted XML crash the app via stack exhaustion DoS only...

PT-2026-87041

Uncontrolled recursion in Qt's QDomDocument serialization QtXml lets deeply nested untrusted XML crash the app via stack exhaustion DoS only...

CVE-2026-11573: Uncontrolled Recursion

Uncontrolled recursion CWE-674 in the QDomDocument/QDomNode serialization path of the Qt XML module QtXml, qtbase. QDomElementPrivate::save and QDomNodePrivate::save recurse mutually, consuming one stack frame per level of element nesting with no depth limit, no configurable bound and no error...

qt: Qt: Denial of Service via uncontrolled recursion in XML processing

A flaw was found in Qt. An attacker can exploit uncontrolled recursion in the QXmlStreamReader::readElementText function by providing a specially crafted XML document. This can lead to a denial of service DoS, causing the application to crash due to stack exhaustion...

qt5-qtbase: qt6-qtbase: Qt: Denial of Service vulnerability in XML parsing

A flaw was found in Qt. This vulnerability, specifically an unbounded recursion in the QDomNode destructor during QDomDocument XML parsing, allows a remote attacker to trigger a denial-of-service DoS crash. By processing untrusted XML input, the affected system can become unresponsive, leading to...

CVE-2026-9499

A flaw was found in Qt, a popular software development framework. This vulnerability, an out-of-bounds read, occurs in the QTextCodec::codecForName function when it processes specially crafted input that is not properly terminated. An attacker could exploit this to cause the application to select...

CVE-2026-15037 affecting package qtbase for versions less than 6.6.3-5

CVE-2026-15037 affecting package qtbase for versions less than 6.6.3-5. A patched version of the package is available...

CVE-2026-15037

A flaw was found in Qt XML. This vulnerability, categorized as improper output neutralization, allows an attacker to inject arbitrary XML Extensible Markup Language markup. This occurs because the QDom component, when serializing comments, CDATA Character Data, and processing instructions, does n...