CVE-2026-96432

A null pointer dereference vulnerability exists in the QNetworkAccessManager class of the Qt Network module . A malicious or compromised HTTP/2 server can exploit this by withholding a SETTINGS ACK and sending an RST_STREAM on a completed stream, which plants a null pointer. Subsequent delivery o...