CVE-2026-107472— Out-of-bounds read vulnerability in QTextCodec TSCII encoding impacts Qt
Quick assessment
Affected
qt Qt
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Qt 5 兼容性 API 模块（即 Qt 5 及更早版本中的 Qt Core）中的 QTextCodec TSCII 编码存在越界读取漏洞。通过 QTextCodec 将文本转换为 TSCII 编码的应用程序可能会读取输入缓冲区之外的内存，从而导致应用程序崩溃或错误解析数据。
Possible ATT&CK Techniques 1 AI
T1203 · Exploitation for Client Execution
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-107472
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Out-of-bounds read vulnerability in QTextCodec TSCII encoding impacts Qt
Source: CVE Program / CVE List V5
Vulnerability Description
An out-of-bounds read vulnerability in the QTextCodec TSCII encoding of the Qt 5 Compatibility APIs module (Qt Core in Qt 5 and earlier) impacts Qt. Applications that convert text to the TSCII encoding through QTextCodec may read memory outside the input buffer, which can cause the application to crash or misinterpret the data.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/R:U/RE:L/U:Green
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存读
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-107472
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-107472
请登录查看更多情报信息。
Other References for CVE-2026-107472 (2)
IV. Related Vulnerabilities
Same product: Qt
-
CVE-2026-105946
Out-of-bounds read vulnerability in NTLM authentication hand -
CVE-2026-107157
Out-of-bounds read vulnerability in QCborValue::fromCbor() i -
CVE-2026-96432
Null pointer dereference vulnerability in QNetworkAccessMana -
CVE-2026-95620
Use-after-free vulnerability in QNetworkAccessManager HTTP/2 -
CVE-2026-16762
Denial-of-service vulnerability in the Qt Core QXmlStream pa
Same vendor: qt
-
CVE-2026-105946
Out-of-bounds read vulnerability in NTLM authentication hand -
CVE-2026-107157
Out-of-bounds read vulnerability in QCborValue::fromCbor() i -
CVE-2026-96432
Null pointer dereference vulnerability in QNetworkAccessMana -
CVE-2026-95620
Use-after-free vulnerability in QNetworkAccessManager HTTP/2 -
CVE-2026-16762
Denial-of-service vulnerability in the Qt Core QXmlStream pa
Same weakness: CWE-125
-
CVE-2026-105946
Out-of-bounds read vulnerability in NTLM authentication hand -
CVE-2026-116841
DevilutionX 1.4.0 through 1.5.5 Out-of-Bounds Read via libmp -
CVE-2025-71439
llama.cpp before b5649 Heap Out-of-Bounds Read via llama_voc -
CVE-2024-58399
llama.cpp before b2731 Out-of-Bounds Read via GGUF Tensor Of -
CVE-2026-116620
Tencent RapidJSON Regex stream.h Take out-of-bounds