Vulnerability in qt

[ Description ]Official description

An integer overflow vulnerability in the Qt XML parsing (Qt5Compat / QXmlSimpleReader) functionality of Qt.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• BSI CERT-Bund1 Nov 2026WID-SEC-2026-4287

  QT: Multiple vulnerabilities allow denial of service Translated from German

  CVE-2026-100140CVE-2026-111487

[ References ]References

• codereview.qt-project.org/c/qt/qt5compat/+/764751
• codereview.qt-project.org/c/qt/qt5compat/+/768900
• codereview.qt-project.org/c/qt/qt5compat/+/768901
• codereview.qt-project.org/c/qt/qt5compat/+/768902
• wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products