QT
Product
qt
81
CVEs
0
On KEV
9.8
Max CVSS
10
New 30D
Severity mix
Critical 5High 26Medium 25Low 9
Watch
Add qt to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-13326 | 6.9 | Sep 11 | Out-of-bounds read and integer underflow vulnerability in QNdefNfcTextRecord impacts Qt NFC module Affected: 5.2.0 before 6.8.9; 6.9.0 before 6.11.2 |
| CVE-2024-30161 | 6.5 | Mar 24 | In Qt 6.5.4, 6.5.5, and 6.6.2, QNetworkReply header data might be accessed via a dangling pointer in Qt for WebAssembly (wasm) Affected: 6.5.4; 6.5.5; 6.6.2 |
| CVE-2023-32573 | 6.5 | May 10 | In Qt before 5.15.14, 6.0.x through 6.2.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1, QtSvg QSvgFont m_unitsPerEm initialization is mishandled Affected: before 5.15.14; 6.0.0 before 6.2.9; 6.3.0 before 6.5.1 |
| CVE-2018-19871 | 6.5 | Dec 26 | An issue was discovered in Qt before 5.11.3 Affected: before 5.11.3 |
| CVE-2018-19869 | 6.5 | Dec 26 | An issue was discovered in Qt before 5.11.3 Affected: before 5.11.3 |
| CVE-2026-9499 | 6.3 | Jul 21 | Out-of-bounds read in QTextCodec::codecForName() in Qt Affected: 6.0.0 before 6.8.8; 6.9.0 before 6.11.1; 4.0.0 before 6.0.0 |
| CVE-2024-25580 | 6.2 | Mar 27 | An issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.12, 6.3.x through 6.5.x before 6.5.5, and 6.6.x before 6.6.2 Affected: 5.12.0 before 5.15.17; 6.0.0 before 6.2.12; 6.3.0 before 6.5.5; 6.6.0 before 6.6.2 |
| CVE-2024-39936 | 5.9 | Jul 4 | An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, and 6.6.x through 6.7.x before 6.7.3 Affected: before 5.15.18; 6.0.0 before 6.2.13; 6.3.0 before 6.5.7; 6.6.0 before 6.7.3 |
| CVE-2020-0569 | 5.7 | Nov 23 | Out of bounds write in Intel(R) PROSet/Wireless WiFi products on Windows 10 may allow an authenticated user to potentially enable denial of service via local access Affected: 5.0.0 through 5.13.2 |
| CVE-2025-5683 | 5.5 | Jun 5 | When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through… Affected: 6.3.0 before 6.5.10; 6.6.0 before 6.8.5; 6.9.0 before 6.9.1 |
| CVE-2023-43114 | 5.5 | Sep 18 | An issue was discovered in Qt before 5.15.16, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3 on Windows Affected: before 5.15.16; 6.0.0 before 6.2.10; 6.5.0 before 6.5.3 |
| CVE-2021-28025 | 5.5 | Aug 11 | Integer Overflow vulnerability in qsvghandler.cpp in Qt qtsvg versions 5.15.1, 6.0.0, 6.0.2, and 6.2, allows local attackers to cause a denial of service (DoS) Affected: 5.15.1; 6.0.0; 6.0.0; 6.0.0; 6.0.0; 6.0.0; +12 more |
| CVE-2018-19872 | 5.5 | Mar 15 | An issue was discovered in Qt 5.11 Affected: 5.11.0 |
| CVE-2026-105946 New | 5.3 | Oct 27 | Out-of-bounds read vulnerability in NTLM authentication handling impacts Qt Affected: 6.8.0 before 6.8.10; 6.9.0 before 6.11.2 |
| CVE-2025-30348 | 5.3 | Mar 21 | encodeText in QDom in Qt before 6.8.0 has a complex algorithm involving XML string copy and inline replacement of parts of a string (with relocation of later data) Affected: before 5.15.19; 6.0.0 before 6.5.9; 6.6.0 before 6.8.0 |
| CVE-2023-34410 | 5.3 | Jun 5 | An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2 Affected: 5.13.0 before 5.15.15; 6.0.0 before 6.2.9; 6.3.0 before 6.5.2 |
| CVE-2023-32762 | 5.3 | May 28 | An issue was discovered in Qt before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1 Affected: 5.9.0 before 5.15.14; 6.0.0 before 6.2.9; 6.3.0 before 6.5.1 |
| CVE-2023-33285 | 5.3 | May 22 | An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1 Affected: 5.0.0 before 5.15.4; 6.0.0 before 6.2.9; 6.3.0 before 6.5.1 |
| CVE-2020-17507 | 5.3 | Aug 12 | An issue was discovered in Qt through 5.12.9, and 5.13.x through 5.15.x before 5.15.1 Affected: through 5.12.9; 5.13.0 before 5.15.1 |
| CVE-2017-10905 | 5.3 | Dec 16 | A vulnerability in applications created using Qt for Android prior to 5.9.3 allows attackers to alter environment variables via unspecified vectors Affected: before 5.9.3 |
| CVE-2026-76151 | 4.6 | Sep 16 | Out-of-bounds read (buffer over-read) vulnerability in HTTP Cache-Control response header parsing impacts Qt Framework (QtNetwork module) Affected: 6.0.0 before 6.8.9; 6.9.0 before 6.11.2 |
| CVE-2026-79680 | 4.5 | Sep 24 | Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module Affected: 6.4.0 before 6.8.9; 6.9.0 before 6.11.3 |
| CVE-2026-107472 New | 4.3 | Oct 27 | Out-of-bounds read vulnerability in QTextCodec TSCII encoding impacts Qt Affected: 4.0.0 through 6.8.8; 6.9.0 through 6.11.2 |
| CVE-2026-101201 | 4.3 | Oct 20 | QBinaryJson::fromBinaryData() integer overflow leading to OOB read Affected: 5.0.0 through 6.8.8; 6.9.0 through 6.11.2 |
| CVE-2026-105923 | 4.0 | Oct 21 | Null-pointer dereference in QTriangulator reachable through VectorImage Affected: 6.8.0 before 6.8.9; 6.9.0 before 6.11.3 |
Showing 25
