Approved changes feed: RSS · Atom
cpe:2.3:a:qt:qtbase:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Qt (ac351d54-6a3a-5b90-a60b-6ef58ef23803) |
|---|---|
| Product | Qtbase (5ad49240-3ed9-56e4-8d68-9c9c90fba9dc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/qtbase5-dev |
purl2cpe | 2026-06-01 10:16:55.987405 |
pkg:deb/ubuntu/qtbase5-dev |
purl2cpe | 2026-06-01 10:16:55.987409 |
pkg:github/qt/qtbase |
purl2cpe | 2026-06-01 10:16:55.987412 |
pkg:qt/qt |
purl2cpe | 2026-06-01 10:16:55.987414 |
pkg:rpm/fedora/qt5-qtbase |
purl2cpe | 2026-06-01 10:16:55.987417 |
pkg:rpm/opensuse/qt5-qtbase |
purl2cpe | 2026-06-01 10:16:55.987420 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-107479 |
under_investigation | 2026-11-04 14:24:37.916499 |
Integer truncation vulnerability in QTextCodec conversion functions impacts Qt Framework
An integer truncation vulnerability in the QTextCodec conversion functions of the Qt 5 Core Compatibility APIs module impacts the Qt Framework. An application using the affected functionality could crash.
Published: 2026-11-04T12:10:28.423Z
Updated: 2026-11-09T21:13:33.488Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-105923 |
vulnerable | 2026-11-03 10:16:33.212763 |
Null-pointer dereference in QTriangulator reachable through VectorImage
A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type.
Published: 2026-10-21T09:21:05.197Z
Updated: 2026-10-29T19:10:32.263Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-105946 |
vulnerable | 2026-11-03 10:16:33.080405 |
Out-of-bounds read vulnerability in NTLM authentication handling impacts Qt
Out-of-bounds read in the QAuthenticator NTLM authentication handling in the Qt Network module in Qt Group Qt allows remote attackers to obtain sensitive information (heap memory contents) or cause a denial of service (application crash) via a crafted NTLM challenge sent by a malicious server or proxy, when an application using QNetworkAccessManager or QTcpSocket authenticates with NTLM.
Published: 2026-10-27T06:45:36.400Z
Updated: 2026-11-04T15:00:53.736Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-105946 |
under_investigation | 2026-11-03 10:16:33.079354 |
Out-of-bounds read vulnerability in NTLM authentication handling impacts Qt
Out-of-bounds read in the QAuthenticator NTLM authentication handling in the Qt Network module in Qt Group Qt allows remote attackers to obtain sensitive information (heap memory contents) or cause a denial of service (application crash) via a crafted NTLM challenge sent by a malicious server or proxy, when an application using QNetworkAccessManager or QTcpSocket authenticates with NTLM.
Published: 2026-10-27T06:45:36.400Z
Updated: 2026-11-04T15:00:53.736Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-16762 |
vulnerable | 2026-11-03 10:15:59.899408 |
Denial-of-service vulnerability in the Qt Core QXmlStream parser (QXmlStreamReader) impacts Qt
An attacker able to supply a crafted XML document to an application using QXmlStreamReader can cause disproportionate CPU consumption during parsing, making the application unresponsive (denial of service). Exploitation requires only that the application parse attacker-influenced XML; no authentication, privileges, or user interaction beyond ingesting the input are needed. There is no loss of confidentiality or integrity — no data disclosure, data modification, or code execution — and the impact is contained to the affected process.
Published: 2026-10-23T08:58:40.028Z
Updated: 2026-10-23T10:56:05.830Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-107472 |
vulnerable | 2026-11-03 10:15:59.422892 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-107590 |
not_vulnerable | 2026-11-03 10:15:59.201722 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-107157 |
not_vulnerable | 2026-11-03 10:15:59.117176 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-96432 |
vulnerable | 2026-11-03 10:15:29.094830 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-101201 |
vulnerable | 2026-11-03 10:15:22.669863 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-32762 |
vulnerable | 2026-06-08 06:04:47.194597 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-18281 |
vulnerable | 2026-06-08 05:13:11.350879 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.