https://vulnogram.org/ Most recent CVEs assigned by tqtc (tqtc). https://vulnogram.org/seaview/icons/tqtc.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-15037 https://vulnogram.org/CVE-2026-15037 Improper output neutralization (XML injection) in QDom comment, CDATA, and processing-instruction serialization in Qt XML from 4.0.0 through 6.11 allows untrusted text serialized by an application into those nodes to inject arbitrary XML markup, beca… Low Network Exploitable Thu, 23 Jul 2026 12:33:11 GMT https://vulnogram.org/CVE-2026-9499 https://vulnogram.org/CVE-2026-9499 An out-of-bounds read (buffer over-read) vulnerability exists in QTextCodec::codecForName() in Qt. When the function is called with a QByteArray that is not NUL-terminated (for example, one created with QByteArray::fromRawData()), the codec-name matc… Medium Network Exploitable Tue, 21 Jul 2026 13:25:27 GMT https://vulnogram.org/CVE-2026-12379 https://vulnogram.org/CVE-2026-12379 An Open Redirect vulnerability (CWE-601) exists in the OAuth/OIDC authentication implementation of the Axivion Dashboard. The login flow did not properly restrict the post-authentication redirect to the application's own origin, so a user who follows… Medium Thu, 16 Jul 2026 15:32:44 GMT https://vulnogram.org/CVE-2026-12593 https://vulnogram.org/CVE-2026-12593 The implementation of an internal and undocumented Dashboard API endpoint (POST /api/users/~/{user}/tokens) forgot to ensure an HTTP request for creating an API Token for another user had sufficient permission to do so. Precondition for successful ex… High Thu, 09 Jul 2026 12:29:47 GMT https://vulnogram.org/CVE-2025-14575 https://vulnogram.org/CVE-2025-14575 An Uncontrolled Search Path Element vulnerability in the OpenSSL TLS backend of Qt Network (qtbase) in Qt Qt Framework (Unix) allows a local attacker to load a rogue CA certificate as a trusted system authority via a crafted certificate file placed i… Low Tue, 19 May 2026 13:01:33 GMT https://vulnogram.org/CVE-2026-6210 https://vulnogram.org/CVE-2026-6210 A type confusion vulnerability in Qt SVG allows an attacker to cause an application crash via a crafted SVG image. When processing SVG marker references, the renderer retrieves a node by its id attribute and casts it to QSvgMarker* without verifying… High Network Exploitable Wed, 06 May 2026 11:59:01 GMT https://vulnogram.org/CVE-2025-14576 https://vulnogram.org/CVE-2025-14576 Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading malicious SVG files through the VectorImage component in Qt Quick. While QML execution is typically more restricted than native code exec… High Thu, 30 Apr 2026 12:39:40 GMT https://vulnogram.org/CVE-2025-12385 https://vulnogram.org/CVE-2025-12385 Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation. This issue affec… High Network Exploitable Wed, 03 Dec 2025 19:38:53 GMT https://vulnogram.org/CVE-2025-6338 https://vulnogram.org/CVE-2025-6338 There is an incomplete cleanup vulnerability in Qt Network's Schannel support on Windows which can lead to a Denial of Service over a long period. This issue affects Qt from 5.15.0 through 6.8.3, from 6.9.0 before 6.9.2. Critical Network Exploitable Thu, 16 Oct 2025 09:22:14 GMT https://vulnogram.org/CVE-2025-10729 https://vulnogram.org/CVE-2025-10729 The module will parse a <pattern> node which is not a child of a structural node. The node will be deleted after creation but might be accessed later leading to a use after free. Critical Fri, 03 Oct 2025 14:39:20 GMT https://vulnogram.org/CVE-2025-10728 https://vulnogram.org/CVE-2025-10728 When the module renders a Svg file that contains a <pattern> element, it might end up rendering it recursively leading to stack overflow DoS Critical Fri, 03 Oct 2025 14:35:02 GMT https://vulnogram.org/CVE-2025-5992 https://vulnogram.org/CVE-2025-5992 When passing values outside of the expected range to QColorTransferGenericFunction it can cause a denial of service, for example, this can happen when passing a specifically crafted ICC profile to QColorSpace::fromICCProfile. This issue affects Qt fr… Low Network Exploitable Fri, 11 Jul 2025 06:45:15 GMT https://vulnogram.org/CVE-2025-5991 https://vulnogram.org/CVE-2025-5991 There is a "Use After Free" vulnerability in Qt's QHttp2ProtocolHandler in the QtNetwork module. This only affects HTTP/2 handling, HTTP handling is not affected by this at all. This happens due to a race condition between how QHttp2Stream uploads th… Low Wed, 11 Jun 2025 07:33:41 GMT https://vulnogram.org/CVE-2025-5683 https://vulnogram.org/CVE-2025-5683 When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1. Medium Network Exploitable Thu, 05 Jun 2025 05:31:13 GMT https://vulnogram.org/CVE-2025-5455 https://vulnogram.org/CVE-2025-5455 An issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code. If the function was called with malformed data, for example, an URL that contained a "charset… High Network Exploitable Mon, 02 Jun 2025 08:46:20 GMT https://vulnogram.org/CVE-2025-4211 https://vulnogram.org/CVE-2025-4211 Improper Link Resolution Before File Access ('Link Following') vulnerability in QFileSystemEngine in the Qt corelib module on Windows which potentially allows Symlink Attacks and the use of Malicious Files. Issue originates from CVE-2024-38081. The v… High Fri, 16 May 2025 13:25:29 GMT https://vulnogram.org/CVE-2025-3512 https://vulnogram.org/CVE-2025-3512 There is a Heap-based Buffer Overflow vulnerability in QTextMarkdownImporter. This requires an incorrectly formatted markdown file to be passed to QTextMarkdownImporter to trigger the overflow. This issue affects Qt from 6.8.0 to 6.8.4. Versions up t… Medium Fri, 11 Apr 2025 07:39:48 GMT