Integer Truncation Vulnerability in Qt Framework by The Qt Company
CVE-2026-107479

1.7LOW

Key Information:

Vendor

Qt

Status
Qt
Vendor
CVE Published:
4 November 2026

What is CVE-2026-107479?

The Qt Framework is impacted by an integer truncation vulnerability in the QTextCodec conversion functions within the Qt 5 Core Compatibility APIs module. Applications that utilize this functionality may experience crashes, leading to disruptions in service and application instability. Developers using affected versions should review vulnerability disclosures and apply available patches to safeguard their applications against potential crashes.

Affected Version(s)

Qt 5.0.0 <= 6.8.8

Qt 6.9.0 <= 6.11.2

References

https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_pr...
vendor-advisory
https://codereview.qt-project.org/c/qt/qt5compat/+/763226
patch

CVSS V4

Score:
1.7
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.