CVE-2026-107472Out-of-bounds read vulnerability in QTextCodec TSCII encoding impacts Qt

Beschreibung

An out-of-bounds read vulnerability in the QTextCodec TSCII encoding of the Qt 5 Compatibility APIs module (Qt Core in Qt 5 and earlier) impacts Qt. Applications that convert text to the TSCII encoding through QTextCodec may read memory outside the input buffer, which can cause the application to crash or misinterpret the data.

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Referenzen und Patches

• https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-107472: vendor-advisory
• https://codereview.qt-project.org/c/qt/qt5compat/+/762021 patch