[ Vendor · 9 CVEs ]
qt
CVEs affecting qt published in the last 30 days, plus any qt CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-105923 | 21 Oct 2026 | CVSS 4.0 | QtA malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type. | |
| CVE-2026-101201 | 20 Oct 2026 | CVSS 4.3 | qtA malformed header in the binary file fed to QBinaryJson::fromBinaryData() can cause undefined behaviour because of out-of-bounds read. | |
| CVE-2026-8168 | 19 Oct 2026 | CVSS 7.1 | qtUncontrolled recursion in the SVG parser and renderer of the Qt SVG module (QtSvg) in Qt Group Qt allows attackers to cause a denial of service… | |
| CVE-2026-94370 | 14 Oct 2026 | CVSS 6.5 | Qt_for_MCUsA defect in the Qt for MCUs core string handling causes heap memory corruption. When an application passes text into Qt Quick Ultralite using the… | |
| CVE-2026-19395 | 5 Oct 2026 | CVSS 6.6 | Qt for MCUsIn Qt for MCUs, a Text element that displays styled text halts the device if an <img> tag in the text contains an attribute with an empty value. The… | |
| CVE-2026-95509 | 29 Sep 2026 | CVSS 8.8 | Qt for MCUsStrings optimized for Latin-1 displaying Latin-1 characters cause incorrect String.arg() formatting by an incorrect buffer size calculation, causing… | |
| CVE-2026-79680 | 24 Sep 2026 | CVSS 4.5 | qtAuthentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module. An attacker using a specially modified VNC… | |
| CVE-2026-78253 | 23 Sep 2026 | CVSS 2.3 | qtUncontrolled recursion in QXmlStreamReader::readElementText() in Qt Group Qt allows attackers to cause a denial of service (application crash via… | |
| CVE-2026-79616 | 23 Sep 2026 | CVSS 0.6 | qtOut-of-bounds read while parsing untrusted SVG path strings in Qt Quick's Context2D.path / PathSvg.path. |