CVE-2026-103653: falha de média gravidade em Qt
Out-of-bounds read vulnerability in CoAP message parsing impacts Qt CoAP
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.7epss 0.3%
An out-of-bounds read vulnerability in the Qt CoAP message parsing (QCoapInternalReply::createFromFrame()) of the Qt CoAP module. Processing a malformed CoAP message can cause an application using Qt CoAP to crash (loss of availability) or to continue operating on incorrect data (potential loss of integrity).
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:U/AU:Y/R:U/RE:L/U:Amber
Produtos afetados
qt · QtCVEs relacionadas — Qt
No mesmo produto, das mais perigosas para as menos.
CVE-2026-107457LOWMemory corruption vulnerability in QMqttClient impacts Qt MQTTEPSS 0.3%CVE-2026-107479LOWInteger truncation vulnerability in QTextCodec conversion functions impacts Qt FrameworkEPSS 0.2%CVE-2026-105924MEDIUMNULL pointer dereference vulnerability in QCborValue to JSON conversion impacts QtEPSS 0.2%CVE-2026-107157LOWOut-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt FrameworkEPSS 0.1%CVE-2026-107590LOWOut-of-bounds write vulnerability in QTextCodec iconv-based encoding impacts QtEPSS 0.1%CVE-2026-107472MEDIUMOut-of-bounds read vulnerability in QTextCodec TSCII encoding impacts QtEPSS 0.1%