CVE-2026-107590Low· 1.9▾ SunlitAn out-of-bounds write vulnerability in the Qt QTextCodec iconv-based encoding of the Qt 5 Compatibility APIs module (Qt Core in Qt 5 and earlier) impacts Qt. Under certain conditions, encoding text with QTextCodec may write outside an i…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 10.5 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
An out-of-bounds write vulnerability in the Qt QTextCodec iconv-based encoding of the Qt 5 Compatibility APIs module (Qt Core in Qt 5 and earlier) impacts Qt. Under certain conditions, encoding text with QTextCodec may write outside an internal buffer. This can cause the application to crash and may affect data integrity.
Qt >= 4.5.0 <= 6.8.8Qt >= 6.9.0 <= 6.11.2Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-107472Medium· 4.3Out-of-bounds read vulnerability in QTextCodec TSCII encoding impacts Qt
CVE-2026-105946Medium· 5.3Out-of-bounds read vulnerability in NTLM authentication handling impacts Qt
CVE-2026-107157Low· 2.0Out-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt Framework
CVE-2026-96432Low· 2.1Null pointer dereference vulnerability in QNetworkAccessManager impacts Qt
CVE-2026-95620Low· 2.1Use-after-free vulnerability in QNetworkAccessManager HTTP/2 support impacts Qt
CVE-2026-16762High· 8.7Denial-of-service vulnerability in the Qt Core QXmlStream parser (QXmlStreamReader) impacts Qt