Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

qt — Vulnerabilities & Security Advisories 32

All 32 CVE vulnerabilities found in qt, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities associated with the Qt software framework, specifically categorized under the software vendor Qt Project and tagged with relevant weakness types. The collection encompasses a comprehensive range of security issues, including memory corruption, logic errors, and input validation flaws, spanning from the initial release of the framework through the most recent patch versions. Readers can utilize this resource to track official vendor advisories, analyze the prevalence and impact of specific weakness classes within the ecosystem, or review the complete historical record of security defects affecting the product. By centralizing these data points, the page facilitates efficient risk assessment and remediation planning for developers and security professionals relying on Qt components in their applications. The information presented focuses strictly on technical details and mitigation strategies without promotional content or external commentary. Users seeking to understand the evolution of security posture for this widely adopted toolkit will find detailed descriptions of each identified flaw alongside corresponding fixes and affected version ranges. This consolidated view supports proactive security management by providing clear visibility into known threats and the timeline of their resolution.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-95620 Use-after-free vulnerability in QNetworkAccessManager HTTP/2 support impacts Qt CWE-416 2.1 Low 2026-10-23
CVE-2026-16762 Denial-of-service vulnerability in the Qt Core QXmlStream parser (QXmlStreamReader) impacts Qt CWE-407 8.7 High 2026-10-23
CVE-2026-105923 Null-pointer dereference in QTriangulator reachable through VectorImage CWE-476 4.0 Medium 2026-10-21
CVE-2026-101201 QBinaryJson::fromBinaryData() integer overflow leading to OOB read CWE-190 4.3 Medium 2026-10-20
CVE-2026-8168 Denial-of-service vulnerability in the SVG parser and renderer impacts Qt CWE-674 7.1 High 2026-10-19
CVE-2026-79680 Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module CWE-288 4.5 Medium 2026-09-24
CVE-2026-78253 Denial-of-service (stack-exhaustion) vulnerability in QXmlStreamReader::readElementText() impacts Qt CWE-674 2.3 Low 2026-09-23
CVE-2026-79616 Out-of-bounds read vulnerability in Context2D.path and PathSvg.path properties impacts Qt Quick CWE-125 0.6 Low 2026-09-23
CVE-2026-76151 Out-of-bounds read (buffer over-read) vulnerability in HTTP Cache-Control response header parsing impacts Qt Framework (QtNetwork module) CWE-125 4.6 Medium 2026-09-16
CVE-2026-19248 Unbounded recursion vulnerability in the QDomNode destructor of Qt XML impacts Qt CWE-674 7.1 High 2026-09-16
CVE-2026-13326 Out-of-bounds read and integer underflow vulnerability in QNdefNfcTextRecord impacts Qt NFC module CWE-125 6.9 Medium 2026-09-11
CVE-2026-11573 Uncontrolled recursion in QDomDocument/QDomNode serialization causes stack exhaustion (QtXml) CWE-674 7.1 High 2026-09-08
CVE-2026-15037 XML injection vulnerability in QDom comment, CDATA and processing-instruction serialization CWE-91 2.9 Low 2026-07-23
CVE-2026-9499 Out-of-bounds read in QTextCodec::codecForName() in Qt CWE-125 - - 2026-07-21
CVE-2025-14575 Uncontrolled Search Path Element in Qt Network OpenSSL TLS backend allows rogue CA certificate loading CWE-427 1.8 Low 2026-05-19
CVE-2026-6210 Type confusion and heap-buffer-overflow in Qt SVG marker handling causing application crash CWE-843 8.7 High 2026-05-06
CVE-2025-14576 Possible QML code injection in VectorImage component CWE-94 7.4 High 2026-04-30
CVE-2025-12385 Improper validation of <img> tag size in Text component parser CWE-770 8.7 High 2025-12-03
CVE-2025-23050 Qt 缓冲区错误漏洞 CWE-125 3.1 Low 2025-10-31
CVE-2025-6338 Possible denial of service with multiple incoming connections to a Schannel based server with a TLS backend CWE-459 9.2 Critical 2025-10-16
CVE-2025-10729 Use-after-free vulnerability in Qt SVG qsvghandler.cpp allows denial of service via crafted SVG CWE-416 9.4 Critical 2025-10-03
CVE-2025-10728 Uncontrolled recursion in Qt SVG module CWE-674 9.4 Critical 2025-10-03
CVE-2025-5992 Passing values outside of expected range to QColorTransferGenericFunction can cause a denial of service CWE-20 2.3 Low 2025-07-11
CVE-2025-5991 Use after free in QHttp2ProtocolHandler CWE-416 2.1 Low 2025-06-11
CVE-2025-5683 Qt 安全漏洞 5.1 Medium 2025-06-05
CVE-2025-5455 Possible denial of service when passing malformed data in a URL to qDecodeDataUrl CWE-20 8.4 High 2025-06-02
CVE-2025-4211 Improper Link Resolution Before File Access in QFileSystemEngine on Windows CWE-59 7.3 High 2025-05-16
CVE-2025-3512 Buffer overflow in QTextMarkdownImporter CWE-122 4.8 Medium 2025-04-11
CVE-2025-30348 Qt 安全漏洞 CWE-407 5.8 Medium 2025-03-21
CVE-2022-40983 Qt 输入验证错误漏洞 CWE-190 8.8 - 2023-01-12

All 32 known CVE vulnerabilities affecting qt with full Chinese analysis, references, and POCs where available.