CVE-2026-82292NULL pointer dereference vulnerability in QDomDocument::setContent() XML parsing impacts Qt

Description

A NULL pointer dereference vulnerability in the Qt Framework QDomDocument::setContent() XML parsing path of the Qt XML module (qtbase).

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

References and patches

• https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-82292: vendor-advisory
• https://codereview.qt-project.org/c/qt/qtbase/+/757771 patch