Skip to content
OpenAdvisories
High WID-SEC-2026-4178 3 CVEs

QT: Mehrere Schwachstellen

Published Oct 26, 2026 · Updated Oct 27, 2026 · Revision 2 · de-DE

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in QT ausnutzen, um einen Denial of Service Angriff durchzuführen und Daten offenzulegen oder zu manipulieren.

Product

Qt ist eine C++ Klassenbibliothek für die plattformübergreifende Programmierung grafischer Benutzeroberflächen.

Vulnerabilities 3

  • Medium 5.3

    Out-of-bounds read vulnerability in NTLM authentication handling impacts Qt

    Out-of-bounds read in the QAuthenticator NTLM authentication handling in the Qt Network module in Qt Group Qt allows remote attackers to obtain sensitive information (heap memory contents) or cause a denial of service (application crash) via a crafted NTLM ch…

  • Medium 4.3

    Out-of-bounds read vulnerability in QTextCodec TSCII encoding impacts Qt

    An out-of-bounds read vulnerability in the QTextCodec TSCII encoding of the Qt 5 Compatibility APIs module (Qt Core in Qt 5 and earlier) impacts Qt. Applications that convert text to the TSCII encoding through QTextCodec may read memory outside the input buff…

  • Low 1.9

    Out-of-bounds write vulnerability in QTextCodec iconv-based encoding impacts Qt

    An out-of-bounds write vulnerability in the Qt QTextCodec iconv-based encoding of the Qt 5 Compatibility APIs module (Qt Core in Qt 5 and earlier) impacts Qt. Under certain conditions, encoding text with QTextCodec may write outside an internal buffer. This c…

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2026-110826

  2. #1

    Initiale Fassung

References