Skip to content
OpenAdvisories

Product · Qt Project

Qt for MCUs

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-94370

    Memory corruption (double free / use-after-free) vulnerability in core string handling impacts Qt for MCUs

    A defect in the Qt for MCUs core string handling causes heap memory corruption. When an application passes text into Qt Quick Ultralite using the public Qul::String interface type, and that text is held in a std::string, the conversion to the internal string …

    Qt Project Qt for MCUs
  • Medium 6.6
    CVE-2026-19395

    An empty <img> attribute value in styled text triggers a parser error that halts the device.

    In Qt for MCUs, a Text element that displays styled text halts the device if an <img> tag in the text contains an attribute with an empty value. The text parser passes the empty value to an internal check that only accepts non-empty values. The check fails an…

    Qt Project Qt for MCUs