QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read (or division by zero)

XML injection vulnerability in QDom comment, CDATA and processing-instruction serialization

Denial-of-service (stack-exhaustion) vulnerability in QXmlStreamReader::readElementText() impacts Qt

Passing values outside of expected range to QColorTransferGenericFunction can cause a denial of service

Null pointer dereference vulnerability in QNetworkAccessManager impacts Qt

Use-after-free vulnerability in QNetworkAccessManager HTTP/2 support impacts Qt

Use after free in QHttp2ProtocolHandler

Out-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt Framework

Out-of-bounds write vulnerability in QTextCodec iconv-based encoding impacts Qt

Uncontrolled Search Path Element in Qt Network OpenSSL TLS backend allows rogue CA certificate loading

Out-of-bounds read vulnerability in Context2D.path and PathSvg.path properties impacts Qt Quick