CVE-2026-111487Out-of-bounds write vulnerability in the assimp scene import plugin of Qt3D impacts Qt Framework

Description

An out-of-bounds write vulnerability in the Qt Framework assimp scene import plugin of the Qt3D module.

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

References and patches

• Qt Wiki: List of known vulnerabilities in Qt products vendor-advisory
• Qt3D patch (dev) patch