CVE-2026-103645Integer overflow vulnerability in QTextCodec fromUnicode() and toUnicode() impacts Qt

Beschreibung

An integer overflow vulnerability in the Qt QTextCodec fromUnicode() and toUnicode() functionality of the Qt 5 Core Compatibility APIs module (Qt 6) and the Qt Core module (Qt 5). Only builds where Qt is compiled with ICU support are affected.

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Referenzen und Patches

• https://www.qt.io/security-advisories?search=CVE-2026-103645 vendor-advisory
• https://codereview.qt-project.org/c/qt/qt5compat/+/762795 patch