AI and data stack advisories

Severe, 6 weeks1498Projects326

1498 severe, 6 weeks · 326 projects

Qt Group PlcCVE-2026-76151

qt: out-of-bounds read

Qt Group Plc

CVE-2026-76151 · Published Sep 16, 2026 · updated Sep 18, 2026

Medium4.6
Fix: upgrade to 6.8.9 or later (2 fixed versions below)
Qt Group Plc advisory

Out-of-bounds read (buffer over-read) in the HTTP Cache-Control response header parsing in the QtNetwork module in Qt Group Qt 6.0.0 through 6.8.8, and 6.9.0 through 6.11.1, allows remote attackers to cause a denial of service (application crash) via an excessively large Cache-Control header value returned by an untrusted or compromised HTTP server to an application using QNetworkAccessManager. Only the client side of the connection is affected and 32-bit builds are not affected; the out-of-bounds access is read-only, with no information disclosure and no code execution.

Affected versions

PackageAffectedFixed in
qt
Product
>= 6.0.0, < 6.8.96.8.9
>= 6.9.0, < 6.11.26.11.2
Details and references
CVSS 4.0
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:X/RE:X/U:X
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-125, CWE-197

More Qt Group Plc advisories

All Qt Group Plc