---
id: CVE-2026-107479
title: >-
  Integer truncation vulnerability in QTextCodec conversion functions impacts Qt
  Framework
summary: >-
  An integer truncation vulnerability in the QTextCodec conversion functions of
  the Qt 5 Core Compatibility APIs module impacts the Qt Framework. An
  application using the affected functionality could crash.
severity: low
cvss: 1.7
cvssVector: >-
  CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/RE:L/U:Green
cvssSource: cna
cwe:
  - CWE-197
vendor: qt
product: Qt
affected:
  - Qt >= 5.0.0 <= 6.8.8
  - Qt >= 6.9.0 <= 6.11.2
published: '2026-11-04'
updated: '2026-11-04'
sourceUpdated: '2026-11-04T12:10:28.423Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-107479'
references:
  - url: >-
      https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-107479:
  - url: 'https://codereview.qt-project.org/c/qt/qt5compat/+/763226'
tags:
  - cve.org
ingestedAt: '2026-11-05T20:33:06.730Z'
---

## Overview

An integer truncation vulnerability in the QTextCodec conversion functions of the Qt 5 Core Compatibility APIs module impacts the Qt Framework. An application using the affected functionality could crash.

## Affected

- `Qt >= 5.0.0 <= 6.8.8`
- `Qt >= 6.9.0 <= 6.11.2`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.