CVE-2026-105923mediumCWE-190CWE-476

CVE-2026-105923: falha de média gravidade em Qt

Null-pointer dereference in QTriangulator reachable through VectorImage

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Qt+ Monitorar qtbase-opensource-src

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4epss 0.1%
A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/RE:L/U:Green
Produtos afetados
qt · Qt
CVEs relacionadas — Qt

No mesmo produto, das mais perigosas para as menos.

CVE-2026-103653MEDIUMOut-of-bounds read vulnerability in CoAP message parsing impacts Qt CoAPEPSS 0.3%CVE-2026-107457LOWMemory corruption vulnerability in QMqttClient impacts Qt MQTTEPSS 0.3%CVE-2026-107479LOWInteger truncation vulnerability in QTextCodec conversion functions impacts Qt FrameworkEPSS 0.2%CVE-2026-105924MEDIUMNULL pointer dereference vulnerability in QCborValue to JSON conversion impacts QtEPSS 0.2%CVE-2026-107157LOWOut-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt FrameworkEPSS 0.1%CVE-2026-107590LOWOut-of-bounds write vulnerability in QTextCodec iconv-based encoding impacts QtEPSS 0.1%