4.3Orta
CVE-2026-97845Uncontrolled recursion vulnerability in QXmlSimpleReader XML parsing impacts Qt
Açıklama
An uncontrolled recursion vulnerability has been discovered in the Qt QXmlSimpleReader XML parsing functionality of the Qt 5 Core Compatibility APIs module (Qt 6) and the Qt XML module (Qt 5).
Zayıflık türü (CWE):
CWE-674
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
Kaynaklar ve yamalar
- https://www.qt.io/security-advisories?search=CVE-2026-97845 vendor-advisory
- https://codereview.qt-project.org/c/qt/qt5compat/+/771290 patch
- https://codereview.qt-project.org/c/qt/qt5compat/+/774512 patch
- https://codereview.qt-project.org/c/qt/qt5compat/+/774513 patch
- https://codereview.qt-project.org/c/qt/qt5compat/+/774632 patch
- https://codereview.qt-project.org/c/qt/qt5compat/+/760219 patch
- https://codereview.qt-project.org/c/qt/qt5compat/+/760220 patch