Product by Open Source
Qt
27 known vulnerabilities in Qt (Open Source), 0 of them actively exploited (CISA KEV).
Key figures
27
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-16762 | Denial-of-service vulnerability in the Qt Core QXmlStream parser (QXmlStreamReader) impacts Qt | — | |
| Medium | CVE-2023-32573 | Qt: security vulnerability | 6.5 | |
| High | CVE-2026-19248 | Unbounded recursion vulnerability in the QDomNode destructor of Qt XML impacts Qt | — | |
| High | CVE-2026-8168 | Denial-of-service vulnerability in the SVG parser and renderer impacts Qt | — | |
| Medium | CVE-2026-76151 | Qt: Out-of-bounds Read | — | |
| High | CVE-2026-11573 | Uncontrolled recursion in QDomDocument/QDomNode serialization causes stack exhaustion (QtXml) | — | |
| Medium | CVE-2026-105946 | Out-of-bounds read vulnerability in NTLM authentication handling impacts Qt | — | |
| Medium | CVE-2026-94370 | Qt_for_MCUs: Double Free | — | |
| High | CVE-2025-12385 | Improper validation of <img> tag size in Text component parser | — | |
| Medium | CVE-2026-9499 | Out-of-bounds read in QTextCodec::codecForName() in Qt | — | |
| High | CVE-2025-14576 | Possible QML code injection in VectorImage component | 7.8 | |
| Medium | CVE-2026-13326 | Out-of-bounds read and integer underflow vulnerability in QNdefNfcTextRecord impacts Qt NFC module | — | |
| Critical | CVE-2025-10729 | Use-after-free vulnerability in Qt SVG qsvghandler.cpp allows denial of service via crafted SVG | 9.3 | |
| Critical | CVE-2025-10728 | Uncontrolled recursion in Qt SVG module | — | |
| Medium | CVE-2026-79680 | Qt: Authentication Bypass Using an Alternate Path or Channel | — | |
| Low | CVE-2026-15037 | XML injection vulnerability in QDom comment, CDATA and processing-instruction serialization | — | |
| Low | CVE-2026-78253 | Denial-of-service (stack-exhaustion) vulnerability in QXmlStreamReader::readElementText() impacts Qt | — | |
| Medium | CVE-2026-101201 | QBinaryJson::fromBinaryData() integer overflow leading to OOB read | — | |
| Medium | CVE-2026-107472 | Out-of-bounds read vulnerability in QTextCodec TSCII encoding impacts Qt | — | |
| Medium | CVE-2026-105924 | NULL pointer dereference vulnerability in QCborValue to JSON conversion impacts Qt | — | |
| Medium | CVE-2021-28025 | Qt: Integer Overflow | 5.5 | |
| Low | CVE-2026-96432 | Null pointer dereference vulnerability in QNetworkAccessManager impacts Qt | — | |
| Low | CVE-2026-95620 | Use-after-free vulnerability in QNetworkAccessManager HTTP/2 support impacts Qt | — | |
| Low | CVE-2026-107157 | Out-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt Framework | — | |
| Low | CVE-2026-107590 | Out-of-bounds write vulnerability in QTextCodec iconv-based encoding impacts Qt | — |