Approved changes feed: RSS · Atom

cpe:2.3:a:qt:qt_for_mcus:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorQt (ac351d54-6a3a-5b90-a60b-6ef58ef23803)
ProductQt For Mcus (5c28dbe6-43d9-5383-8eb8-aa51abd8f44a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-94370 vulnerable 2026-11-03 10:15:43.581344 Memory corruption (double free / use-after-free) vulnerability in core string handling impacts Qt for MCUs
A defect in the Qt for MCUs core string handling causes heap memory corruption. When an application passes text into Qt Quick Ultralite using the public Qul::String interface type, and that text is held in a std::string, the conversion to the internal string type copies the pointer without taking ownership of it. Two objects then release the same memory, producing a double free, an invalid free, or a use-after-free.
Published: 2026-10-14T05:43:27.953Z
Updated: 2026-10-14T16:02:30.639Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.