Uncontrolled Resource Consumption in Qt Framework Affects Qt Network Module
CVE-2026-116337

0.6LOW

Key Information:

Vendor

Qt

Status
Qt Framework
Vendor
CVE Published:
9 November 2026

What is CVE-2026-116337?

This vulnerability resides in the HTTP response handling feature of the Qt Network module, leading to potential uncontrolled resource consumption. Attackers can exploit this flaw to exhaust system resources, which may result in denial of service or degraded application performance. Users of the affected versions are advised to apply the latest patches and monitor their systems for unusual behavior.

Affected Version(s)

Qt Framework 4.5.0 < 6.8.10

Qt Framework 6.9.0 < 6.12.1

References

https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_pr...
vendor-advisory
https://codereview.qt-project.org/c/qt/qtbase/+/774223
patch
https://codereview.qt-project.org/c/qt/qtbase/+/774266
patch

CVSS V4

Score:
0.6
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.