QT
Vendor
qt
101
CVEs
0
On KEV
12
New 30D
Products
QT9.8
qt
qt
90 CVEs0 on KEV10 new
QT8.8
Qt_for_MCUs
qt
3 CVEs0 on KEV2 new
AX8.7
Axivion
Qt
2 CVEs0 on KEV0 new
QN9.8
QT Network Authorization
QT
1 CVEs0 on KEV0 new
QT4.3
Qtbase
QT
1 CVEs0 on KEV0 new
QT7.8
Qtdeclarative
QT
1 CVEs0 on KEV0 new
QT5.5
Qtsvg
QT
1 CVEs0 on KEV0 new
QT5.3
Qtwebkit
QT
1 CVEs0 on KEV0 new
QX5.5
Qxmlsimplereader
QT
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-107590 New | QT Qt qt | 1.9 | Oct 27 | Out-of-bounds write vulnerability in QTextCodec iconv-based encoding impacts Qt |
| CVE-2026-107472 New | QT Qt qt | 4.3 | Oct 27 | Out-of-bounds read vulnerability in QTextCodec TSCII encoding impacts Qt |
| CVE-2026-105946 New | QT qt qt | 5.3 | Oct 27 | Out-of-bounds read vulnerability in NTLM authentication handling impacts Qt |
| CVE-2026-107157 New | QT Qt qt | 2.0 | Oct 26 | Out-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt Framework |
| CVE-2026-96432 New | QT qt qt | 2.1 | Oct 26 | Null pointer dereference vulnerability in QNetworkAccessManager impacts Qt |
| CVE-2026-95620 New | QT qt qt | 2.1 | Oct 23 | Use-after-free vulnerability in QNetworkAccessManager HTTP/2 support impacts Qt |
| CVE-2026-16762 New | QT qt qt | 8.7 | Oct 23 | Denial-of-service vulnerability in the Qt Core QXmlStream parser (QXmlStreamReader) impacts Qt |
| CVE-2026-105923 | QT Qt qt | 4.0 | Oct 21 | Null-pointer dereference in QTriangulator reachable through VectorImage |
| CVE-2026-101201 | QT qt qt | 4.3 | Oct 20 | QBinaryJson::fromBinaryData() integer overflow leading to OOB read |
| CVE-2026-8168 | QT qt qt | 7.1 | Oct 19 | Denial-of-service vulnerability in the SVG parser and renderer impacts Qt |
| CVE-2026-94370 | QT Qt_for_MCUs qt | 6.5 | Oct 14 | Memory corruption (double free / use-after-free) vulnerability in core string handling impacts Qt for MCUs |
| CVE-2026-19395 | QF Qt for MCUs qt | 6.6 | Oct 5 | An empty <img> attribute value in styled text triggers a parser error that halts the device. |
| CVE-2026-95509 | QF Qt for MCUs qt | 8.8 | Sep 29 | Out-of-bounds read vulnerability in string formatting impacts Qt for MCUs |
| CVE-2026-79680 | QT qt qt | 4.5 | Sep 24 | Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module |
| CVE-2026-78253 | QT qt qt | 2.3 | Sep 23 | Denial-of-service (stack-exhaustion) vulnerability in QXmlStreamReader::readElementText() impacts Qt |
| CVE-2026-79616 | QT qt qt | 0.6 | Sep 23 | Out-of-bounds read vulnerability in Context2D.path and PathSvg.path properties impacts Qt Quick |
| CVE-2026-76151 | QT qt qt | 4.6 | Sep 16 | Out-of-bounds read (buffer over-read) vulnerability in HTTP Cache-Control response header parsing impacts Qt Framework (QtNetwork module) |
| CVE-2026-19248 | QT qt qt | 7.1 | Sep 16 | Unbounded recursion vulnerability in the QDomNode destructor of Qt XML impacts Qt |
| CVE-2026-13326 | QT qt qt | 6.9 | Sep 11 | Out-of-bounds read and integer underflow vulnerability in QNdefNfcTextRecord impacts Qt NFC module |
| CVE-2026-11573 | QT qt qt | 7.1 | Sep 8 | Uncontrolled recursion in QDomDocument/QDomNode serialization causes stack exhaustion (QtXml) |
| CVE-2026-15037 | QT Qt Qt | 2.9 | Jul 23 | XML injection vulnerability in QDom comment, CDATA and processing-instruction serialization |
| CVE-2026-9499 | QT Qt Qt | 6.3 | Jul 21 | Out-of-bounds read in QTextCodec::codecForName() in Qt |
| CVE-2026-12379 | AX Axivion Qt | 6.8 | Jul 16 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in the Dashboard OAuth/OIDC implementation of Axivion |
| CVE-2026-12593 | AX Axivion Qt | 8.7 | Jul 9 | Privilege escalation via forged API token creation in Axivion Dashboard OIDC/OAuth2/SSO subsystem |
| CVE-2025-14575 | QT Qt Qt | 1.8 | May 19 | Uncontrolled Search Path Element in Qt Network OpenSSL TLS backend allows rogue CA certificate loading |
| CVE-2026-6210 | QT Qt Qt | 8.7 | May 6 | Type confusion and heap-buffer-overflow in Qt SVG marker handling causing application crash |
| CVE-2025-14576 | QT Qt Qt | 7.8 | Apr 30 | Possible QML code injection in VectorImage component |
| CVE-2025-12385 | QT Qt Qt | 8.7 | Dec 3 | Improper validation of <img> tag size in Text component parser |
| CVE-2025-23050 | QT Qt Qt | 3.1 | Oct 31 | QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read (or division by zero) |
| CVE-2025-6338 | QT Qt Qt | 9.2 | Oct 16 | Possible denial of service with multiple incoming connections to a Schannel based server with a TLS backend |
| CVE-2025-10729 | QT Qt Qt | 9.4 | Oct 3 | Use-after-free vulnerability in Qt SVG qsvghandler.cpp allows denial of service via crafted SVG |
| CVE-2025-10728 | QT Qt Qt | 9.4 | Oct 3 | Uncontrolled recursion in Qt SVG module |
| CVE-2025-5992 | QT Qt Qt | 2.3 | Jul 11 | Passing values outside of expected range to QColorTransferGenericFunction can cause a denial of service |
| CVE-2025-5991 | QT Qt Qt | 2.1 | Jun 11 | Use after free in QHttp2ProtocolHandler |
| CVE-2025-5683 | QT Qt Qt | 5.5 | Jun 5 | When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through… |
| CVE-2025-5455 | QT Qt Qt | 8.4 | Jun 2 | Possible denial of service when passing malformed data in a URL to qDecodeDataUrl |
| CVE-2025-4211 | QT Qt Qt | 7.3 | May 16 | Improper Link Resolution Before File Access in QFileSystemEngine on Windows |
| CVE-2025-3512 | QT Qt Qt | 4.8 | Apr 11 | Buffer overflow in QTextMarkdownImporter |
| CVE-2025-30348 | QT Qt Qt | 5.3 | Mar 21 | encodeText in QDom in Qt before 6.8.0 has a complex algorithm involving XML string copy and inline replacement of parts of a string (with relocation of later data) |
| CVE-2024-39936 | QT QT QT | 5.9 | Jul 4 | An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, and 6.6.x through 6.7.x before 6.7.3 |
| CVE-2024-36048 | QT QT QT | 9.8 | May 18 | QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, and 6.6.x through 6.7.x before 6.7.1 uses only the time to… |
| CVE-2024-25580 | QT QT QT | 6.2 | Mar 27 | An issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.12, 6.3.x through 6.5.x before 6.5.5, and 6.6.x before 6.6.2 |
| CVE-2024-30161 | QT QT QT | 6.5 | Mar 24 | In Qt 6.5.4, 6.5.5, and 6.6.2, QNetworkReply header data might be accessed via a dangling pointer in Qt for WebAssembly (wasm) |
| CVE-2023-51714 | QT QT QT | 9.8 | Dec 24 | An issue was discovered in the HTTP2 implementation in Qt before 5.15.17, 6.x before 6.2.11, 6.3.x through 6.5.x before 6.5.4, and 6.6.x before 6.6.2 |
| CVE-2023-43114 | QT QT QT | 5.5 | Sep 18 | An issue was discovered in Qt before 5.15.16, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3 on Windows |
| CVE-2023-37369 | QT QT QT | 7.5 | Aug 20 | In Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2, there can be an application crash in QXmlStreamReader via a crafted XML string that triggers a… |
| CVE-2021-28025 | QT QT QT | 5.5 | Aug 11 | Integer Overflow vulnerability in qsvghandler.cpp in Qt qtsvg versions 5.15.1, 6.0.0, 6.0.2, and 6.2, allows local attackers to cause a denial of service (DoS) |
| CVE-2023-38197 | QT QT QT | 7.5 | Jul 13 | An issue was discovered in Qt before 5.15.15, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3 |
| CVE-2023-34410 | QT QT QT | 5.3 | Jun 5 | An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2 |
| CVE-2023-32763 | QT QT QT | 7.5 | May 28 | An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1 |
| CVE-2023-32762 | QT QT QT | 5.3 | May 28 | An issue was discovered in Qt before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1 |
| CVE-2023-33285 | QT QT QT | 5.3 | May 22 | An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1 |
| CVE-2023-32573 | QT QT QT | 6.5 | May 10 | In Qt before 5.15.14, 6.0.x through 6.2.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1, QtSvg QSvgFont m_unitsPerEm initialization is mishandled |
| CVE-2023-24607 | QT QT QT | 7.5 | Apr 15 | Qt before 6.4.3 allows a denial of service via a crafted string when the SQL ODBC driver plugin is used and the size of SQLTCHAR is 4 |
| CVE-2022-43591 | QT QT QT | 8.8 | Jan 12 | A buffer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2 |
| CVE-2022-40983 | QT QT QT | 8.8 | Jan 12 | An integer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2 |
| CVE-2021-3481 | QT QT QT | 7.1 | Aug 22 | A flaw was found in Qt |
| CVE-2022-25634 | QT QT QT | 7.5 | Mar 2 | Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory |
| CVE-2022-25255 | QT QT QT | 7.8 | Feb 16 | In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a binary from the current working directory when not found in the PATH |
| CVE-2021-45930 | QT Qtsvg QT | 5.5 | Jan 1 | Qt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds write in QtPrivate::QCommonArrayOps<QPainterPath::Element>::growAppend (called from… |