qt

Top products

The 15 most recently published vulnerabilities affecting qt.

• CVE-2026-78253Denial-of-service (stack-exhaustion) vulnerability in QXmlStreamReader::readElementText() impacts QtSep 23, 2026
• CVE-2026-79616Out-of-bounds read vulnerability in Context2D.path and PathSvg.path properties impacts Qt QuickSep 23, 2026
• CVE-2026-76151Out-of-bounds read (buffer over-read) vulnerability in HTTP Cache-Control response header parsing impacts Qt Framework (QtNetwork module)Sep 16, 2026
• CVE-2026-19248Unbounded recursion vulnerability in the QDomNode destructor of Qt XML impacts QtSep 16, 2026
• CVE-2026-13326Out-of-bounds read and integer underflow vulnerability in QNdefNfcTextRecord impacts Qt NFC moduleSep 11, 2026
• CVE-2026-11573Uncontrolled recursion in QDomDocument/QDomNode serialization causes stack exhaustion (QtXml)Sep 8, 2026
• CVE-2026-15037XML injection vulnerability in QDom comment, CDATA and processing-instruction serializationJul 23, 2026
• CVE-2026-9499Out-of-bounds read in QTextCodec::codecForName() in QtJul 21, 2026
• CVE-2026-12379URL Redirection to Untrusted Site ('Open Redirect') vulnerability in the Dashboard OAuth/OIDC implementation of AxivionJul 16, 2026
• CVE-2026-12593Privilege escalation via forged API token creation in Axivion Dashboard OIDC/OAuth2/SSO subsystemJul 9, 2026
• CVE-2025-14575Uncontrolled Search Path Element in Qt Network OpenSSL TLS backend allows rogue CA certificate loadingMay 19, 2026
• CVE-2026-6210Type confusion and heap-buffer-overflow in Qt SVG marker handling causing application crashMay 6, 2026
• CVE-2025-14576Possible QML code injection in VectorImage component7.8Apr 30, 2026
• CVE-2025-12385Improper validation of <img> tag size in Text component parser4.3Dec 3, 2025
• CVE-2025-23050QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read (or division by zero). This is fixed in 5.15.19, 6.5.9, and 6.8.2.3.1Oct 31, 2025