Denial of Service Vulnerability in Qt Framework

CVE-2026-16762

What is CVE-2026-16762?

This vulnerability arises from an improper handling of specially crafted XML documents by the QXmlStreamReader component of the Qt Framework. When an application parses an XML document influenced by an attacker, it can lead to excessive CPU consumption, rendering the application unresponsive. Notably, this exploitation does not require any authentication, elevated privileges, or user interaction beyond the parsing of the malicious XML input. Although the process may become unresponsive, the security of data—such as confidentiality and integrity—remains intact, and there are no severe repercussions like data breaches or remote code execution.

References