AI and data stack advisories

Severe, 6 weeks977Projects326

977 severe, 6 weeks · 326 projects

Qt Group PlcCVE-2026-107590

Qt: out-of-bounds write

Qt Group Plc

CVE-2026-107590 · Published Oct 27, 2026

Low1.9
No fix yet
Qt Group Plc advisory

An out-of-bounds write vulnerability in the Qt QTextCodec iconv-based encoding of the Qt 5 Compatibility APIs module (Qt Core in Qt 5 and earlier) impacts Qt. Under certain conditions, encoding text with QTextCodec may write outside an internal buffer. This can cause the application to crash and may affect data integrity.

Affected versions

PackageAffectedFixed in
Qt
Product
>= 4.5.0, <= 6.8.8No fix yet
>= 6.9.0, <= 6.11.2No fix yet
Details and references
CVSS 4.0
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:U/V:X/RE:L/U:Green
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-131, CWE-787

More Qt Group Plc advisories

All Qt Group Plc
Medium 4.3Oct 27Qt: out-of-bounds readCVE-2026-107472no fix yetMedium 5.3Oct 27qt: out-of-bounds readCVE-2026-105946fixed in 6.8.10 +1Low 2.0Oct 26Qt: out-of-bounds readCVE-2026-107157no fix yetLow 2.1Oct 23qt: use after freeCVE-2026-95620fixed in 6.11.3Medium 4.0Oct 21Qt: integer overflowCVE-2026-105923fixed in 6.8.9 +1High 8.8Sep 29Qt for MCUs: out-of-bounds readCVE-2026-95509fixed in 2.11.3 +1