Out-of-bounds Read Vulnerability in Qt Products
CVE-2026-101201

4.3MEDIUM

Key Information:

Vendor

Qt

Status
Qt
Vendor
CVE Published:
20 October 2026

What is CVE-2026-101201?

A vulnerability exists in the Qt Framework where a malformed header in a binary file processed by the QBinaryJson::fromBinaryData() function can lead to undefined behavior due to an out-of-bounds read. This flaw could potentially allow an attacker to exploit this issue to manipulate the application’s behavior, which may lead to unexpected results or system crashes.

Affected Version(s)

qt 5.0.0 <= 6.8.8

qt 6.9.0 <= 6.11.2

References

https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_pr...
vendor-advisory
https://codereview.qt-project.org/c/qt/qt5compat/+/758925
patch
https://codereview.qt-project.org/c/qt/qt5compat/+/759230
patch

CVSS V4

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.