Vulnerability in Qt

[ Description ]Official description

Specially crafted CBOR input passed to QCborValue::fromCbor() in Qt Core can cause an out-of-bounds read, which may crash the application and could expose information.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• BSI CERT-Bund25 Oct 2026WID-SEC-2026-4158

  QT: Vulnerability allows denial of service Translated from German

  CVE-2026-107157

[ References ]References

• codereview.qt-project.org/c/qt/qtbase/+/745719
• wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products