CVE-2026-107590: low-severity vulnerability in Qt
Out-of-bounds write vulnerability in QTextCodec iconv-based encoding impacts Qt
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 1.9epss 0.1%
An out-of-bounds write vulnerability in the Qt QTextCodec iconv-based encoding of the Qt 5 Compatibility APIs module (Qt Core in Qt 5 and earlier) impacts Qt. Under certain conditions, encoding text with QTextCodec may write outside an internal buffer. This can cause the application to crash and may affect data integrity.
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:U/R:U/RE:L/U:Green
Affected products
qt · QtRelated CVEs — Qt
In the same product, most dangerous first.
CVE-2026-105924MEDIUMNULL pointer dereference vulnerability in QCborValue to JSON conversion impacts QtEPSS 0.2%CVE-2026-107157LOWOut-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt FrameworkEPSS 0.1%CVE-2026-107472MEDIUMOut-of-bounds read vulnerability in QTextCodec TSCII encoding impacts QtEPSS 0.1%CVE-2026-105923MEDIUMNull-pointer dereference in QTriangulator reachable through VectorImageEPSS 0.1%CVE-2026-103653MEDIUMOut-of-bounds read vulnerability in CoAP message parsing impacts Qt CoAPEPSS —CVE-2026-107457LOWMemory corruption vulnerability in QMqttClient impacts Qt MQTTEPSS —