Y2Y2
Open Cyber
Public vulnerability disclosure

CVE-2026-100140

Integer overflow vulnerability in XML parsing functionality of Qt5Compat impacts Qt

publishedCWE-190

An integer overflow vulnerability in the Qt XML parsing (Qt5Compat / QXmlSimpleReader) functionality of Qt.

Investigate in Cyber JSONMarkdown
Technical severity1.9 lowCVSS 4.0 · CNA: Qt
Published2026-11-02Source updated 2026-11-02
Collected2026-11-021 attributed source

Fixes and workarounds

No remediation reported in collected sources.

Missing remediation information is not evidence that no patch exists.

Affected products and versions

ProductVersionsAuthority
qt
qt 		≥ 6.0.0; ≤ 6.8.9 (affected, python)
≥ 6.9.0; ≤ 6.11.2 (affected, python)
6.12.0 (affected, python)
Other versions: unaffected 		CNA: Qt

Version ranges are source assertions. Check the vendor advisory and your installed configuration before determining exposure.

CVSS assessments

Version / scoreVectorAuthority
4.0 / 1.9
low		 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:U/R:U/U:GreenCNA: Qt

Exploit evidence

No exploit evidence in collected sources. This is not proof of no exploitation.

References