CVE-2026-11573: falha de alta gravidade em qt
Uncontrolled recursion in QDomDocument/QDomNode serialization causes stack exhaustion (QtXml)
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.1epss 0.4%
Uncontrolled recursion (CWE-674) in the QDomDocument/QDomNode serialization path of the Qt XML module (QtXml, qtbase). QDomElementPrivate::save() and QDomNodePrivate::save() recurse mutually, consuming one stack frame per level of element nesting with no depth limit, no configurable bound and no error return. A document with deeply nested elements parses successfully but exhausts the call stack and terminates the process when serialized. Reachable via QDomDocument::toByteArray() (Qt 4.0 and later), QDomDocument::toString(), QDomDocument::toCString(), QDomNode::save(), and operator<<(QTextStream&, const QDomNode&). Denial of service only — no code execution and no memory disclosure.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Produtos afetados
qt · qtCVEs relacionadas — qt
No mesmo produto, das mais perigosas para as menos.
CVE-2026-76151MEDIUMOut-of-bounds read (buffer over-read) vulnerability in HTTP Cache-Control response header parsing impacts Qt Framework (QtNetwork module)EPSS 0.7%CVE-2026-16762HIGHDenial-of-service vulnerability in the Qt Core QXmlStream parser (QXmlStreamReader) impacts QtEPSS 0.5%CVE-2026-105946MEDIUMOut-of-bounds read vulnerability in NTLM authentication handling impacts QtEPSS 0.5%CVE-2026-78253LOWDenial-of-service (stack-exhaustion) vulnerability in QXmlStreamReader::readElementText() impacts QtEPSS 0.4%CVE-2026-19248HIGHUnbounded recursion vulnerability in the QDomNode destructor of Qt XML impacts QtEPSS 0.4%CVE-2026-8168HIGHDenial-of-service vulnerability in the SVG parser and renderer impacts QtEPSS 0.4%