Out-of-Bounds Read Vulnerability in Qt CoAP Module by The Qt Company
CVE-2026-103653

6.7MEDIUM

Key Information:

Vendor

Qt

Status
Qt
Vendor
CVE Published:
3 November 2026

What is CVE-2026-103653?

The out-of-bounds read vulnerability in the Qt CoAP module can arise when processing malformed CoAP messages. This flaw may lead to application crashes or incorrect data handling, resulting in potential risks to both availability and data integrity. Proper handling of CoAP messages is crucial to maintaining application stability and ensuring accurate data management.

Affected Version(s)

Qt 5.13.0 <= 6.8.8

Qt 6.9.0 <= 6.11.2

Qt 0 < 5.13.0

References

https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_pr...
vendor-advisory
https://codereview.qt-project.org/c/qt/qtcoap/+/760652
patch
https://codereview.qt-project.org/c/qt/qtcoap/+/761120
patch

CVSS V4

Score:
6.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.