CVE-2026-107479lowCWE-197

CVE-2026-107479: low-severity vulnerability in Qt

Integer truncation vulnerability in QTextCodec conversion functions impacts Qt Framework

Published

Follow this CVE+ Monitor Qt

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 1.7epss 0.2%
An integer truncation vulnerability in the QTextCodec conversion functions of the Qt 5 Core Compatibility APIs module impacts the Qt Framework. An application using the affected functionality could crash.
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/RE:L/U:Green
Affected products
qt · Qt
Related CVEs — Qt

In the same product, most dangerous first.

CVE-2026-103653MEDIUMOut-of-bounds read vulnerability in CoAP message parsing impacts Qt CoAPEPSS 0.3%CVE-2026-107457LOWMemory corruption vulnerability in QMqttClient impacts Qt MQTTEPSS 0.3%CVE-2026-105924MEDIUMNULL pointer dereference vulnerability in QCborValue to JSON conversion impacts QtEPSS 0.2%CVE-2026-107157LOWOut-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt FrameworkEPSS 0.1%CVE-2026-107590LOWOut-of-bounds write vulnerability in QTextCodec iconv-based encoding impacts QtEPSS 0.1%CVE-2026-107472MEDIUMOut-of-bounds read vulnerability in QTextCodec TSCII encoding impacts QtEPSS 0.1%