TQtC

Latest CVEs · RSS

• CVE-2026-15037 2026-07-23 · CVSS 2.9
  Improper output neutralization (XML injection) in QDom comment, CDATA, and processing-instruction serialization in Qt XML from 4.0.0 through 6.11 allows untrust
• CVE-2026-9499 2026-07-21 · CVSS 6.3
  An out-of-bounds read (buffer over-read) vulnerability exists in QTextCodec::codecForName() in Qt. When the function is called with a QByteArray that is not NUL
• CVE-2026-12379 2026-07-16 · CVSS 6.8
  An Open Redirect vulnerability (CWE-601) exists in the OAuth/OIDC authentication implementation of the Axivion Dashboard. The login flow did not properly restri
• CVE-2026-12593 2026-07-09 · CVSS 8.7
  The implementation of an internal and undocumented Dashboard API endpoint (POST /api/users/~/{user}/tokens) forgot to ensure an HTTP request for creating an API
• CVE-2025-14575 2026-05-19 · CVSS 1.8
  An Uncontrolled Search Path Element vulnerability in the OpenSSL TLS backend of Qt Network (qtbase) in Qt Qt Framework (Unix) allows a local attacker to load a
• CVE-2026-6210 2026-05-06 · CVSS 8.7
  A type confusion vulnerability in Qt SVG allows an attacker to cause an application crash via a crafted SVG image. When processing SVG marker references, the
• CVE-2025-14576 2026-04-30 · CVSS 7.4
  Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading malicious SVG files through the VectorImage com
• CVE-2025-12385 2025-12-03 · CVSS 8.7
  Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, L
• CVE-2025-6338 2025-10-16 · CVSS 9.2
  There is an incomplete cleanup vulnerability in Qt Network's Schannel support on Windows which can lead to a Denial of Service over a long period. This issue a
• CVE-2025-10729 2025-10-03 · CVSS 9.4
  The module will parse a <pattern> node which is not a child of a structural node. The node will be deleted after creation but might be accessed later leading to
• CVE-2025-10728 2025-10-03 · CVSS 9.4
  When the module renders a Svg file that contains a <pattern> element, it might end up rendering it recursively leading to stack overflow DoS
• CVE-2025-5992 2025-07-11 · CVSS 2.3
  When passing values outside of the expected range to QColorTransferGenericFunction it can cause a denial of service, for example, this can happen when passing a
• CVE-2025-5991 2025-06-11 · CVSS 2.1
  There is a "Use After Free" vulnerability in Qt's QHttp2ProtocolHandler in the QtNetwork module. This only affects HTTP/2 handling, HTTP handling is not affecte
• CVE-2025-5683 2025-06-05 · CVSS 5.1
  When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash.  This issue affects Qt from versions 6.3.0 through 6.5.9, fr
• CVE-2025-5455 2025-06-02 · CVSS 8.4
  An issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code.
• CVE-2025-4211 2025-05-16 · CVSS 7.3
  Improper Link Resolution Before File Access ('Link Following') vulnerability in QFileSystemEngine in the Qt corelib module on Windows which potentially allows S
• CVE-2025-3512 2025-04-11 · CVSS 4.8
  There is a Heap-based Buffer Overflow vulnerability in QTextMarkdownImporter. This requires an incorrectly formatted markdown file to be passed to QTextMarkdown