CVE-2026-107590: falha de baixa gravidade em Qt
Out-of-bounds write vulnerability in QTextCodec iconv-based encoding impacts Qt
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 1.9epss 0.1%
An out-of-bounds write vulnerability in the Qt QTextCodec iconv-based encoding of the Qt 5 Compatibility APIs module (Qt Core in Qt 5 and earlier) impacts Qt. Under certain conditions, encoding text with QTextCodec may write outside an internal buffer. This can cause the application to crash and may affect data integrity.
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:U/R:U/RE:L/U:Green
Produtos afetados
qt · QtCVEs relacionadas — Qt
No mesmo produto, das mais perigosas para as menos.
CVE-2026-103653MEDIUMOut-of-bounds read vulnerability in CoAP message parsing impacts Qt CoAPEPSS 0.3%CVE-2026-107457LOWMemory corruption vulnerability in QMqttClient impacts Qt MQTTEPSS 0.3%CVE-2026-107479LOWInteger truncation vulnerability in QTextCodec conversion functions impacts Qt FrameworkEPSS 0.2%CVE-2026-105924MEDIUMNULL pointer dereference vulnerability in QCborValue to JSON conversion impacts QtEPSS 0.2%CVE-2026-107157LOWOut-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt FrameworkEPSS 0.1%CVE-2026-107472MEDIUMOut-of-bounds read vulnerability in QTextCodec TSCII encoding impacts QtEPSS 0.1%