{"schema_version":1,"title":"Qt vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 24 vulnerabilities in Qt: 5 in the last 7 days and 24 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-97845, was published on 12 November 2026. 15 vulnerabilities in the last four weeks, up 275% on the four before (4). 3 technologies have a page of their own.","url":"https://junglewise.ai/threats/vendors/qt","json_url":"https://junglewise.ai/threats/vendors/qt.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/qt","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","thin":false,"counts":{"high":0,"all_time":24,"critical":0,"exploited":0,"last_7_days":5,"last_30_days":19,"last_90_days":24,"last_365_days":24},"latest":[{"cve":"CVE-2026-97845","slug":"cve-2026-97845-an-uncontrolled-recursion-vulnerability-has-been-discovered-in","title":"Qt QXmlSimpleReader uncontrolled recursion in XML parsing","severity":"info","exploited":false,"published_at":"2026-11-12T14:17:30.88+00:00","url":"https://junglewise.ai/threats/cve-2026-97845-an-uncontrolled-recursion-vulnerability-has-been-discovered-in"},{"cve":"CVE-2026-114369","slug":"cve-2026-114369-resource-exhaustion-vulnerability-in-the-qt-framework-qwebsocket","title":"Qt WebSockets resource exhaustion","severity":"info","exploited":false,"published_at":"2026-11-12T12:18:19.057+00:00","url":"https://junglewise.ai/threats/cve-2026-114369-resource-exhaustion-vulnerability-in-the-qt-framework-qwebsocket"},{"cve":"CVE-2026-82292","slug":"cve-2026-82292-a-null-pointer-dereference-vulnerability-in-the-qt-framework","title":"Qt Framework NULL pointer dereference in QDomDocument XML parsing","severity":"info","exploited":false,"published_at":"2026-11-12T08:16:42.167+00:00","url":"https://junglewise.ai/threats/cve-2026-82292-a-null-pointer-dereference-vulnerability-in-the-qt-framework"},{"cve":"CVE-2026-116337","slug":"cve-2026-116337-uncontrolled-resource-consumption-vulnerability-in-the-qt","title":"Qt Framework uncontrolled resource consumption in HTTP response handling","severity":"info","exploited":false,"published_at":"2026-11-09T09:16:58.45+00:00","url":"https://junglewise.ai/threats/cve-2026-116337-uncontrolled-resource-consumption-vulnerability-in-the-qt"},{"cve":"CVE-2026-114366","slug":"cve-2026-114366-an-information-disclosure-vulnerability-in-the-qt-framework","title":"Qt Framework QWebSocket authentication information disclosure","severity":"info","exploited":false,"published_at":"2026-11-06T05:18:20.22+00:00","url":"https://junglewise.ai/threats/cve-2026-114366-an-information-disclosure-vulnerability-in-the-qt-framework"},{"cve":"CVE-2026-107479","slug":"cve-2026-107479-an-integer-truncation-vulnerability-in-the-qtextcodec-conversion","title":"Qt Framework integer truncation in QTextCodec conversion","severity":"info","exploited":false,"published_at":"2026-11-04T13:17:21.54+00:00","url":"https://junglewise.ai/threats/cve-2026-107479-an-integer-truncation-vulnerability-in-the-qtextcodec-conversion"},{"cve":"CVE-2026-110944","slug":"cve-2026-110944-resource-exhaustion-vulnerability-in-the-http-request-handling","title":"Qt HTTP Server QHttpServer resource exhaustion","severity":"info","exploited":false,"published_at":"2026-11-04T08:17:15.313+00:00","url":"https://junglewise.ai/threats/cve-2026-110944-resource-exhaustion-vulnerability-in-the-http-request-handling"},{"cve":"CVE-2026-103653","slug":"cve-2026-103653-an-out-of-bounds-read-vulnerability-in-the-qt-coap-message","title":"Qt CoAP out-of-bounds read in message parsing","severity":"info","exploited":false,"published_at":"2026-11-03T08:17:13.83+00:00","url":"https://junglewise.ai/threats/cve-2026-103653-an-out-of-bounds-read-vulnerability-in-the-qt-coap-message"},{"cve":"CVE-2026-100140","slug":"cve-2026-100140-an-integer-overflow-vulnerability-in-the-qt-xml-parsing","title":"Qt integer overflow in XML parsing","severity":"info","exploited":false,"published_at":"2026-11-02T12:16:58.91+00:00","url":"https://junglewise.ai/threats/cve-2026-100140-an-integer-overflow-vulnerability-in-the-qt-xml-parsing"},{"cve":"CVE-2026-107457","slug":"cve-2026-107457-a-memory-corruption-vulnerability-in-the-qmqttclient-class-of","title":"Qt QMqttClient memory corruption in MQTT 5","severity":"info","exploited":false,"published_at":"2026-11-02T09:17:36.43+00:00","url":"https://junglewise.ai/threats/cve-2026-107457-a-memory-corruption-vulnerability-in-the-qmqttclient-class-of"},{"cve":"CVE-2026-111487","slug":"cve-2026-111487-an-out-of-bounds-write-vulnerability-in-the-qt-framework-assimp","title":"Qt Framework out-of-bounds write in Qt3D assimp plugin","severity":"info","exploited":false,"published_at":"2026-10-30T15:16:44.963+00:00","url":"https://junglewise.ai/threats/cve-2026-111487-an-out-of-bounds-write-vulnerability-in-the-qt-framework-assimp"},{"cve":"CVE-2026-105924","slug":"cve-2026-105924-a-null-pointer-dereference-vulnerability-in-the-qt-qcborvalue-to","title":"Qt Core NULL pointer dereference in CBOR to JSON conversion","severity":"info","exploited":false,"published_at":"2026-10-30T12:16:34.39+00:00","url":"https://junglewise.ai/threats/cve-2026-105924-a-null-pointer-dereference-vulnerability-in-the-qt-qcborvalue-to"},{"cve":"CVE-2026-107590","slug":"cve-2026-107590-an-out-of-bounds-write-vulnerability-in-the-qt-qtextcodec-iconv","title":"Qt out-of-bounds write in QTextCodec iconv encoding","severity":"info","exploited":false,"published_at":"2026-10-27T13:16:54.307+00:00","url":"https://junglewise.ai/threats/cve-2026-107590-an-out-of-bounds-write-vulnerability-in-the-qt-qtextcodec-iconv"},{"cve":"CVE-2026-107472","slug":"cve-2026-107472-an-out-of-bounds-read-vulnerability-in-the-qtextcodec-tscii","title":"Qt out-of-bounds read in QTextCodec TSCII encoding","severity":"info","exploited":false,"published_at":"2026-10-27T08:16:52.66+00:00","url":"https://junglewise.ai/threats/cve-2026-107472-an-out-of-bounds-read-vulnerability-in-the-qtextcodec-tscii"},{"cve":"CVE-2026-107157","slug":"cve-2026-107157-out-of-bounds-read-vulnerability-in-qcborvalue-fromcbor-impacts","title":"Qt Framework out-of-bounds read in QCborValue::fromCbor()","severity":"info","exploited":false,"published_at":"2026-10-26T14:16:23.967+00:00","url":"https://junglewise.ai/threats/cve-2026-107157-out-of-bounds-read-vulnerability-in-qcborvalue-fromcbor-impacts"},{"cve":"CVE-2026-95620","slug":"cve-2026-95620-a-use-after-free-vulnerability-in-the-qt-qnetworkaccessmanager","title":"Qt use-after-free in QNetworkAccessManager HTTP/2 support","severity":"info","exploited":false,"published_at":"2026-10-23T12:18:20.08+00:00","url":"https://junglewise.ai/threats/cve-2026-95620-a-use-after-free-vulnerability-in-the-qt-qnetworkaccessmanager"},{"cve":"CVE-2026-16762","slug":"cve-2026-16762-an-attacker-able-to-supply-a-crafted-xml-document-to-an","title":"Qt QXmlStreamReader denial of service via crafted XML","severity":"info","exploited":false,"published_at":"2026-10-23T09:17:06.647+00:00","url":"https://junglewise.ai/threats/cve-2026-16762-an-attacker-able-to-supply-a-crafted-xml-document-to-an"},{"cve":"CVE-2026-105923","slug":"cve-2026-105923-a-malicious-svg-can-trigger-an-integer-overflow-which-in-turn","title":"Qt VectorImage integer overflow and null-pointer dereference","severity":"info","exploited":false,"published_at":"2026-10-21T10:16:54.917+00:00","url":"https://junglewise.ai/threats/cve-2026-105923-a-malicious-svg-can-trigger-an-integer-overflow-which-in-turn"},{"cve":"CVE-2026-101201","slug":"cve-2026-101201-a-malformed-header-in-the-binary-file-fed-to-qbinaryjson","title":"Qt binary JSON out-of-bounds read in QBinaryJson::fromBinaryData","severity":"info","exploited":false,"published_at":"2026-10-20T09:17:08.397+00:00","url":"https://junglewise.ai/threats/cve-2026-101201-a-malformed-header-in-the-binary-file-fed-to-qbinaryjson"},{"cve":"CVE-2026-19395","epss":0.0043,"slug":"cve-2026-19395-in-qt-for-mcus-a-text-element-that-displays-styled-text-halts-the","title":"Qt for MCUs Text element denial of service with malformed img tag","severity":"info","exploited":false,"published_at":"2026-10-05T10:16:41.923+00:00","url":"https://junglewise.ai/threats/cve-2026-19395-in-qt-for-mcus-a-text-element-that-displays-styled-text-halts-the"},{"cve":"CVE-2026-95509","slug":"cve-2026-95509-strings-optimized-for-latin-1-displaying-latin-1-characters-cause","title":"Qt QString buffer overflow in String.arg() with Latin-1 encoding","severity":"info","exploited":false,"published_at":"2026-09-29T11:16:43.947+00:00","url":"https://junglewise.ai/threats/cve-2026-95509-strings-optimized-for-latin-1-displaying-latin-1-characters-cause"},{"cve":"CVE-2026-79680","epss":0.0034,"slug":"cve-2026-79680-authentication-bypass-vulnerability-in-the-password","title":"Qt VNC Server authentication bypass in password mechanism","severity":"info","exploited":false,"published_at":"2026-09-24T11:16:47.117+00:00","url":"https://junglewise.ai/threats/cve-2026-79680-authentication-bypass-vulnerability-in-the-password"},{"cve":"CVE-2026-79616","epss":0.0011,"slug":"cve-2026-79616-out-of-bounds-read-while-parsing-untrusted-svg-path-strings-in-qt","title":"Qt Quick out-of-bounds read in SVG path parsing","severity":"info","exploited":false,"published_at":"2026-09-23T10:17:07.803+00:00","url":"https://junglewise.ai/threats/cve-2026-79616-out-of-bounds-read-while-parsing-untrusted-svg-path-strings-in-qt"},{"cve":"CVE-2026-13326","epss":0.0015,"slug":"cve-2026-13326-qt-nfc-out-of-bounds-read-in-language-code-parsing","title":"Qt NFC out-of-bounds read in language code parsing","severity":"info","exploited":false,"published_at":"2026-09-11T07:16:45.62+00:00","url":"https://junglewise.ai/threats/cve-2026-13326-qt-nfc-out-of-bounds-read-in-language-code-parsing"}],"vendor":{"hub":true,"name":"Qt","slug":"qt","homepage":"https://www.qt.io/","description":"Qt is a cross-platform application development framework for building graphical user interfaces and applications.","url":"https://junglewise.ai/threats/vendors/qt"},"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":4},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":5},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":6},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":4}],"most_severe":[{"cve":"CVE-2026-19395","epss":0.0043,"slug":"cve-2026-19395-in-qt-for-mcus-a-text-element-that-displays-styled-text-halts-the","title":"Qt for MCUs Text element denial of service with malformed img tag","severity":"info","exploited":false,"published_at":"2026-10-05T10:16:41.923+00:00","url":"https://junglewise.ai/threats/cve-2026-19395-in-qt-for-mcus-a-text-element-that-displays-styled-text-halts-the"},{"cve":"CVE-2026-79680","epss":0.0034,"slug":"cve-2026-79680-authentication-bypass-vulnerability-in-the-password","title":"Qt VNC Server authentication bypass in password mechanism","severity":"info","exploited":false,"published_at":"2026-09-24T11:16:47.117+00:00","url":"https://junglewise.ai/threats/cve-2026-79680-authentication-bypass-vulnerability-in-the-password"},{"cve":"CVE-2026-13326","epss":0.0015,"slug":"cve-2026-13326-qt-nfc-out-of-bounds-read-in-language-code-parsing","title":"Qt NFC out-of-bounds read in language code parsing","severity":"info","exploited":false,"published_at":"2026-09-11T07:16:45.62+00:00","url":"https://junglewise.ai/threats/cve-2026-13326-qt-nfc-out-of-bounds-read-in-language-code-parsing"},{"cve":"CVE-2026-79616","epss":0.0011,"slug":"cve-2026-79616-out-of-bounds-read-while-parsing-untrusted-svg-path-strings-in-qt","title":"Qt Quick out-of-bounds read in SVG path parsing","severity":"info","exploited":false,"published_at":"2026-09-23T10:17:07.803+00:00","url":"https://junglewise.ai/threats/cve-2026-79616-out-of-bounds-read-while-parsing-untrusted-svg-path-strings-in-qt"},{"cve":"CVE-2026-97845","slug":"cve-2026-97845-an-uncontrolled-recursion-vulnerability-has-been-discovered-in","title":"Qt QXmlSimpleReader uncontrolled recursion in XML parsing","severity":"info","exploited":false,"published_at":"2026-11-12T14:17:30.88+00:00","url":"https://junglewise.ai/threats/cve-2026-97845-an-uncontrolled-recursion-vulnerability-has-been-discovered-in"},{"cve":"CVE-2026-114369","slug":"cve-2026-114369-resource-exhaustion-vulnerability-in-the-qt-framework-qwebsocket","title":"Qt WebSockets resource exhaustion","severity":"info","exploited":false,"published_at":"2026-11-12T12:18:19.057+00:00","url":"https://junglewise.ai/threats/cve-2026-114369-resource-exhaustion-vulnerability-in-the-qt-framework-qwebsocket"},{"cve":"CVE-2026-82292","slug":"cve-2026-82292-a-null-pointer-dereference-vulnerability-in-the-qt-framework","title":"Qt Framework NULL pointer dereference in QDomDocument XML parsing","severity":"info","exploited":false,"published_at":"2026-11-12T08:16:42.167+00:00","url":"https://junglewise.ai/threats/cve-2026-82292-a-null-pointer-dereference-vulnerability-in-the-qt-framework"},{"cve":"CVE-2026-116337","slug":"cve-2026-116337-uncontrolled-resource-consumption-vulnerability-in-the-qt","title":"Qt Framework uncontrolled resource consumption in HTTP response handling","severity":"info","exploited":false,"published_at":"2026-11-09T09:16:58.45+00:00","url":"https://junglewise.ai/threats/cve-2026-116337-uncontrolled-resource-consumption-vulnerability-in-the-qt"},{"cve":"CVE-2026-114366","slug":"cve-2026-114366-an-information-disclosure-vulnerability-in-the-qt-framework","title":"Qt Framework QWebSocket authentication information disclosure","severity":"info","exploited":false,"published_at":"2026-11-06T05:18:20.22+00:00","url":"https://junglewise.ai/threats/cve-2026-114366-an-information-disclosure-vulnerability-in-the-qt-framework"},{"cve":"CVE-2026-107479","slug":"cve-2026-107479-an-integer-truncation-vulnerability-in-the-qtextcodec-conversion","title":"Qt Framework integer truncation in QTextCodec conversion","severity":"info","exploited":false,"published_at":"2026-11-04T13:17:21.54+00:00","url":"https://junglewise.ai/threats/cve-2026-107479-an-integer-truncation-vulnerability-in-the-qtextcodec-conversion"}],"generated_at":"2026-11-13T03:07:00.155039+00:00","technologies":[{"name":"Qt Framework","slug":"qt-qt-framework","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/qt-qt-framework"},{"name":"Qt","slug":"qt-qt","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/qt-qt"},{"name":"Qt 5","slug":"qt-5","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/qt-5"}]}