CVE-2026-101201QBinaryJson::fromBinaryData() integer overflow leading to OOB read

Description

A malformed header in the binary file fed to QBinaryJson::fromBinaryData() can cause undefined behaviour because of out-of-bounds read.

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

References and patches

• Qt Wiki: List of known vulnerabilities in Qt products vendor-advisory
• dev patch 1 patch
• dev patch 2 patch