https://vulnogram.org/ Most recent CVEs assigned by Qt Group (qt). https://vulnogram.org/seaview/icons/qt.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-101201 https://vulnogram.org/CVE-2026-101201 A malformed header in the binary file fed to QBinaryJson::fromBinaryData() can cause undefined behaviour because of out-of-bounds read. Medium Tue, 20 Oct 2026 08:20:38 GMT https://vulnogram.org/CVE-2026-8168 https://vulnogram.org/CVE-2026-8168 Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module (QtSvg) in Qt Group Qt allows attackers to cause a denial of service (application crash via stack exhaustion) via a crafted SVG file with deeply nested elements. High Network Exploitable Mon, 19 Oct 2026 13:08:14 GMT https://vulnogram.org/CVE-2026-94370 https://vulnogram.org/CVE-2026-94370 A defect in the Qt for MCUs core string handling causes heap memory corruption. When an application passes text into Qt Quick Ultralite using the public Qul::String interface type, and that text is held in a std::string, the conversion to the interna… Medium Network Exploitable Wed, 14 Oct 2026 05:43:27 GMT https://vulnogram.org/CVE-2026-19395 https://vulnogram.org/CVE-2026-19395 In Qt for MCUs, a Text element that displays styled text halts the device if an <img> tag in the text contains an attribute with an empty value. The text parser passes the empty value to an internal check that only accepts non-empty values. The check… Medium Network Exploitable Mon, 05 Oct 2026 09:18:28 GMT https://vulnogram.org/CVE-2026-95509 https://vulnogram.org/CVE-2026-95509 Strings optimized for Latin-1 displaying Latin-1 characters cause incorrect String.arg() formatting by an incorrect buffer size calculation, causing out-of-bounds reading. High Network Exploitable Tue, 29 Sep 2026 10:40:12 GMT https://vulnogram.org/CVE-2026-79680 https://vulnogram.org/CVE-2026-79680 Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module. An attacker using a specially modified VNC client that violates the RFB protocol can bypass Qt VNC Server's password authentication and gain una… Medium Network Exploitable Thu, 24 Sep 2026 10:56:08 GMT https://vulnogram.org/CVE-2026-78253 https://vulnogram.org/CVE-2026-78253 Uncontrolled recursion in QXmlStreamReader::readElementText() in Qt Group Qt allows attackers to cause a denial of service (application crash via stack exhaustion) via a crafted XML document. Low Network Exploitable Wed, 23 Sep 2026 11:39:03 GMT https://vulnogram.org/CVE-2026-79616 https://vulnogram.org/CVE-2026-79616 Out-of-bounds read while parsing untrusted SVG path strings in Qt Quick's Context2D.path / PathSvg.path. Low Wed, 23 Sep 2026 09:51:47 GMT https://vulnogram.org/CVE-2026-76151 https://vulnogram.org/CVE-2026-76151 Out-of-bounds read (buffer over-read) in the HTTP Cache-Control response header parsing in the QtNetwork module in Qt Group Qt 6.0.0 through 6.8.8, and 6.9.0 through 6.11.1, allows remote attackers to cause a denial of service (application crash) via… Medium Network Exploitable Wed, 16 Sep 2026 09:58:00 GMT https://vulnogram.org/CVE-2026-19248 https://vulnogram.org/CVE-2026-19248 QDomDocument XML parsing is vulnerable to a remotely-triggerable denial-of-service crash when processing untrusted input. High Network Exploitable Wed, 16 Sep 2026 06:37:40 GMT https://vulnogram.org/CVE-2026-13326 https://vulnogram.org/CVE-2026-13326 An out-of-bounds read in Qt NFC's language code length parsing allows a physically proximate attacker to cause a denial of service or limited memory disclosure via a crafted NFC tag. Medium Fri, 11 Sep 2026 06:11:01 GMT https://vulnogram.org/CVE-2026-11573 https://vulnogram.org/CVE-2026-11573 Uncontrolled recursion (CWE-674) in the QDomDocument/QDomNode serialization path of the Qt XML module (QtXml, qtbase). QDomElementPrivate::save() and QDomNodePrivate::save() recurse mutually, consuming one stack frame per level of element nesting wit… High Network Exploitable Tue, 08 Sep 2026 12:06:08 GMT