Vulnerability-Lookup

RHSA-2026:89193

Vulnerability from csaf_redhat - Published: 2026-10-25 02:26 - Updated: 2026-11-04 05:49

Summary

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Severity

Moderate

Notes

Topic: An update for Red Hat Hardened Images RPMs is now available.

Details: This update includes the following RPMs: qt6: * qt6-filesystem-6.12.0-1.hum1 (aarch64, s390x, x86_64) * qt6-rpm-macros-6.12.0-1.hum1 (noarch) * qt6-srpm-macros-6.12.0-1.hum1 (noarch) * qt6-6.12.0-1.hum1.src (src)

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-105923

A flaw was found in qt6. An attacker could exploit this vulnerability to cause a Denial of Service (DoS) by crashing the application. When the VectorImage component processes a specially crafted Scalable Vector Graphics (SVG) file, an integer calculation error triggers an invalid memory access (null-pointer dereference). To trigger this issue, an attacker must persuade a user or application to load the malicious SVG file.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 10 products

Product	Version	Remediation
Unresolved product id: Red Hat Hardened Images:qt6-0:6.12.0-1.hum1@src	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:qt6-filesystem-0:6.12.0-1.hum1@aarch64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:qt6-filesystem-0:6.12.0-1.hum1@s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:qt6-filesystem-0:6.12.0-1.hum1@x86_64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-aarch64-rpms	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-s390x-rpms	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-x86_64-rpms	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-aarch64-rpms	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-s390x-rpms	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-x86_64-rpms	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2026-107157

A flaw was found in Qt. An out-of-bounds read vulnerability exists in the QCborValue::fromCbor() function when parsing malformed Concise Binary Object Representation (CBOR) data. By convincing an application to process specially crafted CBOR input, an attacker could cause an application crash leading to a Denial of Service (DoS) or potentially read unauthorized memory, resulting in information disclosure.

3.6 (Low)


                
                  CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L

CWE-125 - Out-of-bounds Read

Affected products

Fixed 10 products, the same list as for CVE-2026-105923

Threats

Impact Low

CVE-2026-107457

A flaw was found in Qt. Under certain MQTT version 5 (MQTT 5) connection settings between a client and a server, the QMqttClient class can corrupt memory. A remote attacker could exploit this vulnerability to crash the affected application, resulting in a Denial of Service (DoS).

5.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 10 products, the same list as for CVE-2026-105923

Threats

Impact Moderate

References

31 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:89193	self
https://images.redhat.com/	external
https://access.redhat.com/security/cve/CVE-2026-95620	external
https://access.redhat.com/security/updates/classi…	external
https://access.redhat.com/security/cve/CVE-2026-105923	external
https://access.redhat.com/security/cve/CVE-2026-107157	external
https://access.redhat.com/security/cve/CVE-2026-96432	external
https://access.redhat.com/security/cve/CVE-2026-105946	external
https://access.redhat.com/security/cve/CVE-2026-107472	external
https://access.redhat.com/security/cve/CVE-2026-107590	external
https://access.redhat.com/security/cve/CVE-2026-107457	external
https://access.redhat.com/security/cve/CVE-2026-103653	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-105923	self
https://bugzilla.redhat.com/show_bug.cgi?id=2558168	external
https://www.cve.org/CVERecord?id=CVE-2026-105923	external
https://nvd.nist.gov/vuln/detail/CVE-2026-105923	external
https://codereview.qt-project.org/c/qt%2Fqtbase/+…	external
https://wiki.qt.io/List_of_known_vulnerabilities_…	external
https://access.redhat.com/security/cve/CVE-2026-107157	self
https://bugzilla.redhat.com/show_bug.cgi?id=2560729	external
https://www.cve.org/CVERecord?id=CVE-2026-107157	external
https://nvd.nist.gov/vuln/detail/CVE-2026-107157	external
https://codereview.qt-project.org/c/qt/qtbase/+/745719	external
https://wiki.qt.io/List_of_known_vulnerabilities_…	external
https://access.redhat.com/security/cve/CVE-2026-107457	self
https://bugzilla.redhat.com/show_bug.cgi?id=2564735	external
https://www.cve.org/CVERecord?id=CVE-2026-107457	external
https://nvd.nist.gov/vuln/detail/CVE-2026-107457	external
https://codereview.qt-project.org/c/qt/qtmqtt/+/762286	external
https://wiki.qt.io/List_of_known_vulnerabilities_…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for Red Hat Hardened Images RPMs is now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This update includes the following RPMs:\n\nqt6:\n  * qt6-filesystem-6.12.0-1.hum1 (aarch64, s390x, x86_64)\n  * qt6-rpm-macros-6.12.0-1.hum1 (noarch)\n  * qt6-srpm-macros-6.12.0-1.hum1 (noarch)\n  * qt6-6.12.0-1.hum1.src (src)",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:89193",
        "url": "https://access.redhat.com/errata/RHSA-2026:89193"
      },
      {
        "category": "external",
        "summary": "https://images.redhat.com/",
        "url": "https://images.redhat.com/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-95620",
        "url": "https://access.redhat.com/security/cve/CVE-2026-95620"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-105923",
        "url": "https://access.redhat.com/security/cve/CVE-2026-105923"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-107157",
        "url": "https://access.redhat.com/security/cve/CVE-2026-107157"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-96432",
        "url": "https://access.redhat.com/security/cve/CVE-2026-96432"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-105946",
        "url": "https://access.redhat.com/security/cve/CVE-2026-105946"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-107472",
        "url": "https://access.redhat.com/security/cve/CVE-2026-107472"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-107590",
        "url": "https://access.redhat.com/security/cve/CVE-2026-107590"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-107457",
        "url": "https://access.redhat.com/security/cve/CVE-2026-107457"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-103653",
        "url": "https://access.redhat.com/security/cve/CVE-2026-103653"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_89193.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
    "tracking": {
      "current_release_date": "2026-11-04T05:49:22+00:00",
      "generator": {
        "date": "2026-11-04T05:49:22+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.4"
        }
      },
      "id": "RHSA-2026:89193",
      "initial_release_date": "2026-10-25T02:26:03+00:00",
      "revision_history": [
        {
          "date": "2026-10-25T02:26:03+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-11-03T09:45:16+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-11-04T05:49:22+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Hardened Images",
                "product": {
                  "name": "Red Hat Hardened Images",
                  "product_id": "Red Hat Hardened Images",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:hummingbird:1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Hardened Images"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "qt6-0:6.12.0-1.hum1@src",
                "product": {
                  "name": "qt6-0:6.12.0-1.hum1@src",
                  "product_id": "qt6-0:6.12.0-1.hum1@src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/qt6@6.12.0-1.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "qt6-filesystem-0:6.12.0-1.hum1@aarch64",
                "product": {
                  "name": "qt6-filesystem-0:6.12.0-1.hum1@aarch64",
                  "product_id": "qt6-filesystem-0:6.12.0-1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/qt6-filesystem@6.12.0-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "qt6-filesystem-0:6.12.0-1.hum1@s390x",
                "product": {
                  "name": "qt6-filesystem-0:6.12.0-1.hum1@s390x",
                  "product_id": "qt6-filesystem-0:6.12.0-1.hum1@s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/qt6-filesystem@6.12.0-1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "qt6-filesystem-0:6.12.0-1.hum1@x86_64",
                "product": {
                  "name": "qt6-filesystem-0:6.12.0-1.hum1@x86_64",
                  "product_id": "qt6-filesystem-0:6.12.0-1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/qt6-filesystem@6.12.0-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
                "product": {
                  "name": "qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_id": "qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/qt6-rpm-macros@6.12.0-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-s390x-rpms",
                "product": {
                  "name": "qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-s390x-rpms",
                  "product_id": "qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-s390x-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/qt6-rpm-macros@6.12.0-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
                "product": {
                  "name": "qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_id": "qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/qt6-rpm-macros@6.12.0-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
                "product": {
                  "name": "qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_id": "qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/qt6-srpm-macros@6.12.0-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-s390x-rpms",
                "product": {
                  "name": "qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-s390x-rpms",
                  "product_id": "qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-s390x-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/qt6-srpm-macros@6.12.0-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
                "product": {
                  "name": "qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_id": "qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/qt6-srpm-macros@6.12.0-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qt6-0:6.12.0-1.hum1@src as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:qt6-0:6.12.0-1.hum1@src"
        },
        "product_reference": "qt6-0:6.12.0-1.hum1@src",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qt6-filesystem-0:6.12.0-1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:qt6-filesystem-0:6.12.0-1.hum1@aarch64"
        },
        "product_reference": "qt6-filesystem-0:6.12.0-1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qt6-filesystem-0:6.12.0-1.hum1@s390x as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:qt6-filesystem-0:6.12.0-1.hum1@s390x"
        },
        "product_reference": "qt6-filesystem-0:6.12.0-1.hum1@s390x",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qt6-filesystem-0:6.12.0-1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:qt6-filesystem-0:6.12.0-1.hum1@x86_64"
        },
        "product_reference": "qt6-filesystem-0:6.12.0-1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-aarch64-rpms"
        },
        "product_reference": "qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-s390x-rpms"
        },
        "product_reference": "qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-s390x-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-x86_64-rpms"
        },
        "product_reference": "qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-aarch64-rpms"
        },
        "product_reference": "qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-s390x-rpms"
        },
        "product_reference": "qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-s390x-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-x86_64-rpms"
        },
        "product_reference": "qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-105923",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2026-10-21T09:32:36.122254+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2558168"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in qt6. An attacker could exploit this vulnerability to cause a Denial of Service (DoS) by crashing the application. When the VectorImage component processes a specially crafted Scalable Vector Graphics (SVG) file, an integer calculation error triggers an invalid memory access (null-pointer dereference). To trigger this issue, an attacker must persuade a user or application to load the malicious SVG file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "qt6: qt6: Denial of Service via crafted SVG in VectorImage",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is evaluated as Moderate impact because successful exploitation requires user interaction to process an untrusted vector graphics file and is strictly limited to application denial of service. In Red Hat deployments, Qt6 is primarily utilized in client and desktop software where an unexpected termination impacts only the active user session rather than core infrastructure. Because the flaw triggers an immediate application crash without memory corruption or unauthorized data exposure, it does not present a threat to system confidentiality or integrity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:qt6-0:6.12.0-1.hum1@src",
          "Red Hat Hardened Images:qt6-filesystem-0:6.12.0-1.hum1@aarch64",
          "Red Hat Hardened Images:qt6-filesystem-0:6.12.0-1.hum1@s390x",
          "Red Hat Hardened Images:qt6-filesystem-0:6.12.0-1.hum1@x86_64",
          "Red Hat Hardened Images:qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-x86_64-rpms"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-105923"
        },
        {
          "category": "external",
          "summary": "RHBZ#2558168",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2558168"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-105923",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-105923"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-105923",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-105923"
        },
        {
          "category": "external",
          "summary": "https://codereview.qt-project.org/c/qt%2Fqtbase/+/762279",
          "url": "https://codereview.qt-project.org/c/qt%2Fqtbase/+/762279"
        },
        {
          "category": "external",
          "summary": "https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products",
          "url": "https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products"
        }
      ],
      "release_date": "2026-10-21T09:21:05.197000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-25T02:26:03+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:qt6-0:6.12.0-1.hum1@src",
            "Red Hat Hardened Images:qt6-filesystem-0:6.12.0-1.hum1@aarch64",
            "Red Hat Hardened Images:qt6-filesystem-0:6.12.0-1.hum1@s390x",
            "Red Hat Hardened Images:qt6-filesystem-0:6.12.0-1.hum1@x86_64",
            "Red Hat Hardened Images:qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-x86_64-rpms"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89193"
        },
        {
          "category": "workaround",
          "details": "Avoid opening or rendering untrusted SVG files in applications utilizing Qt6 QML VectorImage components.\n\nOperational controls:\n1. Verify that automated pipelines and users only process vector graphics received from trusted, verified sources.\n2. Where handling untrusted graphics is necessary, isolate Qt6-based applications within a sandbox or unprivileged container environment (such as bubblewrap or an isolated container) to confine potential application crashes.\n\nCaveats:\nOperational sandboxing mitigates blast radius on the broader host system, but it does not prevent the individual application process from terminating abnormally when an affected file is parsed.",
          "product_ids": [
            "Red Hat Hardened Images:qt6-0:6.12.0-1.hum1@src",
            "Red Hat Hardened Images:qt6-filesystem-0:6.12.0-1.hum1@aarch64",
            "Red Hat Hardened Images:qt6-filesystem-0:6.12.0-1.hum1@s390x",
            "Red Hat Hardened Images:qt6-filesystem-0:6.12.0-1.hum1@x86_64",
            "Red Hat Hardened Images:qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-x86_64-rpms"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:qt6-0:6.12.0-1.hum1@src",
            "Red Hat Hardened Images:qt6-filesystem-0:6.12.0-1.hum1@aarch64",
            "Red Hat Hardened Images:qt6-filesystem-0:6.12.0-1.hum1@s390x",
            "Red Hat Hardened Images:qt6-filesystem-0:6.12.0-1.hum1@x86_64",
            "Red Hat Hardened Images:qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-x86_64-rpms"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "qt6: qt6: Denial of Service via crafted SVG in VectorImage"
    },
    {
      "cve": "CVE-2026-107157",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-10-26T14:15:44.731811+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2560729"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Qt. An out-of-bounds read vulnerability exists in the QCborValue::fromCbor() function when parsing malformed Concise Binary Object Representation (CBOR) data. By convincing an application to process specially crafted CBOR input, an attacker could cause an application crash leading to a Denial of Service (DoS) or potentially read unauthorized memory, resulting in information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "qt: Out-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt Framework",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An out-of-bounds read vulnerability was found in the Qt framework\u0027s QCborValue::fromCbor() function. When an application parses malformed Concise Binary Object Representation (CBOR) input, an attacker can trigger memory reads beyond the designated buffer boundaries. This flaw directly leads to an application crash (Denial of Service) or potential disclosure of unauthorized process memory.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:qt6-0:6.12.0-1.hum1@src",
          "Red Hat Hardened Images:qt6-filesystem-0:6.12.0-1.hum1@aarch64",
          "Red Hat Hardened Images:qt6-filesystem-0:6.12.0-1.hum1@s390x",
          "Red Hat Hardened Images:qt6-filesystem-0:6.12.0-1.hum1@x86_64",
          "Red Hat Hardened Images:qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-x86_64-rpms"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-107157"
        },
        {
          "category": "external",
          "summary": "RHBZ#2560729",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2560729"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-107157",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-107157"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-107157",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-107157"
        },
        {
          "category": "external",
          "summary": "https://codereview.qt-project.org/c/qt/qtbase/+/745719",
          "url": "https://codereview.qt-project.org/c/qt/qtbase/+/745719"
        },
        {
          "category": "external",
          "summary": "https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-107157:",
          "url": "https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-107157:"
        }
      ],
      "release_date": "2026-10-26T12:52:26.628000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-25T02:26:03+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:qt6-0:6.12.0-1.hum1@src",
            "Red Hat Hardened Images:qt6-filesystem-0:6.12.0-1.hum1@aarch64",
            "Red Hat Hardened Images:qt6-filesystem-0:6.12.0-1.hum1@s390x",
            "Red Hat Hardened Images:qt6-filesystem-0:6.12.0-1.hum1@x86_64",
            "Red Hat Hardened Images:qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-x86_64-rpms"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89193"
        },
        {
          "category": "workaround",
          "details": "Refactor application code to utilize the QByteArray overload of QCborValue::fromCbor() rather than pointer-and-size variants. Validate and enforce strict length constraints on untrusted CBOR payloads prior to parsing.",
          "product_ids": [
            "Red Hat Hardened Images:qt6-0:6.12.0-1.hum1@src",
            "Red Hat Hardened Images:qt6-filesystem-0:6.12.0-1.hum1@aarch64",
            "Red Hat Hardened Images:qt6-filesystem-0:6.12.0-1.hum1@s390x",
            "Red Hat Hardened Images:qt6-filesystem-0:6.12.0-1.hum1@x86_64",
            "Red Hat Hardened Images:qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-x86_64-rpms"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 3.6,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:qt6-0:6.12.0-1.hum1@src",
            "Red Hat Hardened Images:qt6-filesystem-0:6.12.0-1.hum1@aarch64",
            "Red Hat Hardened Images:qt6-filesystem-0:6.12.0-1.hum1@s390x",
            "Red Hat Hardened Images:qt6-filesystem-0:6.12.0-1.hum1@x86_64",
            "Red Hat Hardened Images:qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-x86_64-rpms"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "qt: Out-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt Framework"
    },
    {
      "cve": "CVE-2026-107457",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-11-02T08:51:57.573228+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2564735"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Qt. Under certain MQTT version 5 (MQTT 5) connection settings between a client and a server, the QMqttClient class can corrupt memory. A remote attacker could exploit this vulnerability to crash the affected application, resulting in a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "qt: qt: Denial of Service via memory corruption in QMqttClient",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A memory corruption vulnerability in Qt\u0027s QMqttClient class allows a remote attacker to cause an application crash and denial of service by negotiating specific MQTT 5 connection parameters between client and server.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:qt6-0:6.12.0-1.hum1@src",
          "Red Hat Hardened Images:qt6-filesystem-0:6.12.0-1.hum1@aarch64",
          "Red Hat Hardened Images:qt6-filesystem-0:6.12.0-1.hum1@s390x",
          "Red Hat Hardened Images:qt6-filesystem-0:6.12.0-1.hum1@x86_64",
          "Red Hat Hardened Images:qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-x86_64-rpms"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-107457"
        },
        {
          "category": "external",
          "summary": "RHBZ#2564735",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2564735"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-107457",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-107457"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-107457",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-107457"
        },
        {
          "category": "external",
          "summary": "https://codereview.qt-project.org/c/qt/qtmqtt/+/762286",
          "url": "https://codereview.qt-project.org/c/qt/qtmqtt/+/762286"
        },
        {
          "category": "external",
          "summary": "https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-107457:",
          "url": "https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-107457:"
        }
      ],
      "release_date": "2026-11-02T08:38:12.500000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-25T02:26:03+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:qt6-0:6.12.0-1.hum1@src",
            "Red Hat Hardened Images:qt6-filesystem-0:6.12.0-1.hum1@aarch64",
            "Red Hat Hardened Images:qt6-filesystem-0:6.12.0-1.hum1@s390x",
            "Red Hat Hardened Images:qt6-filesystem-0:6.12.0-1.hum1@x86_64",
            "Red Hat Hardened Images:qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-x86_64-rpms"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:89193"
        },
        {
          "category": "workaround",
          "details": "Configure client applications to connect using MQTT protocol version 3.1.1 rather than MQTT 5 where supported by the broker. If MQTT 5 is required, enforce strict broker-side validation to disallow non-standard or malformed session property negotiation.",
          "product_ids": [
            "Red Hat Hardened Images:qt6-0:6.12.0-1.hum1@src",
            "Red Hat Hardened Images:qt6-filesystem-0:6.12.0-1.hum1@aarch64",
            "Red Hat Hardened Images:qt6-filesystem-0:6.12.0-1.hum1@s390x",
            "Red Hat Hardened Images:qt6-filesystem-0:6.12.0-1.hum1@x86_64",
            "Red Hat Hardened Images:qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-x86_64-rpms"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:qt6-0:6.12.0-1.hum1@src",
            "Red Hat Hardened Images:qt6-filesystem-0:6.12.0-1.hum1@aarch64",
            "Red Hat Hardened Images:qt6-filesystem-0:6.12.0-1.hum1@s390x",
            "Red Hat Hardened Images:qt6-filesystem-0:6.12.0-1.hum1@x86_64",
            "Red Hat Hardened Images:qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:qt6-rpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:qt6-srpm-macros-0:6.12.0-1.hum1@noarch@public-hummingbird-x86_64-rpms"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "qt: qt: Denial of Service via memory corruption in QMqttClient"
    }
  ]
}

CVE-2026-105923 (GCVE-0-2026-105923)

Vulnerability from cvelistv5 – Published: 2026-10-21 09:21 – Updated: 2026-10-29 19:10

Title

Null-pointer dereference in QTriangulator reachable through VectorImage

Summary

A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type.

Severity

4 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/RE:L/U:Green

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-29 19:10 UTC

CWE

CWE-476 - NULL Pointer Dereference
CWE-190 - Integer Overflow or Wraparound

Assigner

Qt CNA under the mitre root

CNA scorecard A 92/100 over 25 records in the last 180 days details

References

2 references

URL	Tags
https://wiki.qt.io/List_of_known_vulnerabilities_…	vendor-advisory
https://codereview.qt-project.org/c/qt%2Fqtbase/+…	patch

Impacted products

1 product

Vendor	Product	Version
qt	Qt	Affected: 6.8.0 , < 6.8.9 (python) Affected: 6.9.0 , < 6.11.3 (python) cpe:2.3:a:qt:qt:::::::: cpe:2.3:a:qt:qtbase::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-105923",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-29T19:10:08.181222Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-29T19:10:32.263Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*",
            "cpe:2.3:a:qt:qtbase:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "modules": [
            "qtbase"
          ],
          "product": "Qt",
          "vendor": "qt",
          "versions": [
            {
              "lessThan": "6.8.9",
              "status": "affected",
              "version": "6.8.0",
              "versionType": "python"
            },
            {
              "lessThan": "6.11.3",
              "status": "affected",
              "version": "6.9.0",
              "versionType": "python"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type."
            }
          ],
          "value": "A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-92",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-92 Forced Integer Overflow"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 4,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "GREEN",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "ACTIVE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/RE:L/U:Green",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "LOW"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-476",
              "description": "CWE-476 NULL Pointer Dereference",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-190",
              "description": "CWE-190 Integer Overflow or Wraparound",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-21T09:21:05.197Z",
        "orgId": "a59d8014-47c4-4630-ab43-e1b13cbe58e3",
        "shortName": "Qt"
      },
      "references": [
        {
          "name": "Qt Wiki: List of known vulnerabilities in Qt products",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products"
        },
        {
          "name": "dev patch (qtbase)",
          "tags": [
            "patch"
          ],
          "url": "https://codereview.qt-project.org/c/qt%2Fqtbase/+/762279"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Null-pointer dereference in QTriangulator reachable through VectorImage",
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a59d8014-47c4-4630-ab43-e1b13cbe58e3",
    "assignerShortName": "Qt",
    "cveId": "CVE-2026-105923",
    "datePublished": "2026-10-21T09:21:05.197Z",
    "dateReserved": "2026-10-06T06:07:06.587Z",
    "dateUpdated": "2026-10-29T19:10:32.263Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-107157 (GCVE-0-2026-107157)

Vulnerability from cvelistv5 – Published: 2026-10-26 12:52 – Updated: 2026-10-27 07:52

Title

Out-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt Framework

Summary

Specially crafted CBOR input passed to QCborValue::fromCbor() in Qt Core can cause an out-of-bounds read, which may crash the application and could expose information.

Severity

2 (Low)


                        
                          CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/RE:L/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-26 14:59 UTC

CWE

CWE-125 - Out-of-bounds Read

Assigner

Qt CNA under the mitre root

CNA scorecard A 92/100 over 25 records in the last 180 days details

References

2 references

URL	Tags
https://wiki.qt.io/List_of_known_vulnerabilities_…	vendor-advisory
https://codereview.qt-project.org/c/qt/qtbase/+/745719	patch

Impacted products

1 product

Vendor	Product	Version
qt	Qt	Unaffected: 0 , < 5.12.0 (python) Affected: 5.12.0 , ≤ 6.8.8 (python) Affected: 6.9.0 , ≤ 6.11.2 (python) cpe:2.3:a:qt:qt:::::::: cpe:2.3:a:qt:qtbase::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-107157",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-26T14:59:49.279269Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-26T15:35:52.516Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*",
            "cpe:2.3:a:qt:qtbase:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "modules": [
            "qtbase"
          ],
          "platforms": [
            "64 bit"
          ],
          "product": "Qt",
          "vendor": "qt",
          "versions": [
            {
              "lessThan": "5.12.0",
              "status": "unaffected",
              "version": "0",
              "versionType": "python"
            },
            {
              "lessThanOrEqual": "6.8.8",
              "status": "affected",
              "version": "5.12.0",
              "versionType": "python"
            },
            {
              "lessThanOrEqual": "6.11.2",
              "status": "affected",
              "version": "6.9.0",
              "versionType": "python"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:qt:qt:*:*:64_bit:*:*:*:*:*",
                  "versionEndExcluding": "5.12.0",
                  "versionStartIncluding": "0",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:qt:qt:*:*:64_bit:*:*:*:*:*",
                  "versionEndIncluding": "6.8.8",
                  "versionStartIncluding": "5.12.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:qt:qt:*:*:64_bit:*:*:*:*:*",
                  "versionEndIncluding": "6.11.2",
                  "versionStartIncluding": "6.9.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Specially crafted CBOR input passed to QCborValue::fromCbor() in Qt Core can cause an out-of-bounds read, which may crash the application and could expose information."
            }
          ],
          "value": "Specially crafted CBOR input passed to QCborValue::fromCbor() in Qt Core can cause an out-of-bounds read, which may crash the application and could expose information."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-540",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-540 Overread Buffers"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "HIGH",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 2,
            "baseSeverity": "LOW",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/RE:L/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "LOW"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125 Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T07:52:45.806Z",
        "orgId": "a59d8014-47c4-4630-ab43-e1b13cbe58e3",
        "shortName": "Qt"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-107157:"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://codereview.qt-project.org/c/qt/qtbase/+/745719"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "title": "Out-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt Framework",
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a59d8014-47c4-4630-ab43-e1b13cbe58e3",
    "assignerShortName": "Qt",
    "cveId": "CVE-2026-107157",
    "datePublished": "2026-10-26T12:52:26.628Z",
    "dateReserved": "2026-10-07T10:50:59.680Z",
    "dateUpdated": "2026-10-27T07:52:45.806Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-107457 (GCVE-0-2026-107457)

Vulnerability from cvelistv5 – Published: 2026-11-02 08:38 – Updated: 2026-11-02 19:21

Title

Memory corruption vulnerability in QMqttClient impacts Qt MQTT

Summary

A memory corruption vulnerability in the QMqttClient class of the Qt MQTT module. Under certain MQTT 5 connection settings between client and server, QMqttClient may corrupt memory, which can cause the application to crash.

Severity

2.3 (Low)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/R:U/RE:L/U:Green

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-11-02 19:21 UTC

CWE

CWE-787 - Out-of-bounds Write
CWE-129 - Improper Validation of Array Index

Assigner

Qt CNA under the mitre root

CNA scorecard A 92/100 over 25 records in the last 180 days details

References

2 references

URL	Tags
https://wiki.qt.io/List_of_known_vulnerabilities_…	vendor-advisory
https://codereview.qt-project.org/c/qt/qtmqtt/+/762286	patch

Impacted products

1 product

Vendor	Product	Version
qt	Qt	Affected: 5.12.0 , ≤ 6.8.8 (python) Affected: 6.9.0 , ≤ 6.11.2 (python) Unaffected: 0 , < 5.12.0 (python) cpe:2.3:a:qt:qt:::::::: cpe:2.3:a:qt:qtmqtt::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-107457",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-11-02T19:21:42.698312Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-11-02T19:21:56.150Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*",
            "cpe:2.3:a:qt:qtmqtt:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "modules": [
            "qtmqtt"
          ],
          "product": "Qt",
          "vendor": "qt",
          "versions": [
            {
              "lessThanOrEqual": "6.8.8",
              "status": "affected",
              "version": "5.12.0",
              "versionType": "python"
            },
            {
              "lessThanOrEqual": "6.11.2",
              "status": "affected",
              "version": "6.9.0",
              "versionType": "python"
            },
            {
              "lessThan": "5.12.0",
              "status": "unaffected",
              "version": "0",
              "versionType": "python"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "6.8.8",
                  "versionStartIncluding": "5.12.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "6.11.2",
                  "versionStartIncluding": "6.9.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.12.0",
                  "versionStartIncluding": "0",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A memory corruption vulnerability in the QMqttClient class of the Qt MQTT module.\u0026nbsp;Under certain MQTT 5 connection settings between client and server, QMqttClient may corrupt memory, which can cause the application to crash."
            }
          ],
          "value": "A memory corruption vulnerability in the QMqttClient class of the Qt MQTT module.\u00a0Under certain MQTT 5 connection settings between client and server, QMqttClient may corrupt memory, which can cause the application to crash."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-100",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-100 Overflow Buffers"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 2.3,
            "baseSeverity": "LOW",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "GREEN",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/R:U/RE:L/U:Green",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "LOW"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-129",
              "description": "CWE-129 Improper Validation of Array Index",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-02T08:38:12.500Z",
        "orgId": "a59d8014-47c4-4630-ab43-e1b13cbe58e3",
        "shortName": "Qt"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-107457:"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://codereview.qt-project.org/c/qt/qtmqtt/+/762286"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "title": "Memory corruption vulnerability in QMqttClient impacts Qt MQTT",
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a59d8014-47c4-4630-ab43-e1b13cbe58e3",
    "assignerShortName": "Qt",
    "cveId": "CVE-2026-107457",
    "datePublished": "2026-11-02T08:38:12.500Z",
    "dateReserved": "2026-10-08T05:22:08.839Z",
    "dateUpdated": "2026-11-02T19:21:56.150Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2026:89193

CVE-2026-105923 (GCVE-0-2026-105923)

CVE-2026-107157 (GCVE-0-2026-107157)

CVE-2026-107457 (GCVE-0-2026-107457)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour