CVE-2026-101201
qt: QBinaryJson::fromBinaryData() integer overflow leading to OOB read
qt qt
CVSS
4.3MediumExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.13%Chance of exploitation activity in the next 30 days, higher than 2% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
What fixes it
No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.
Description
A malformed header in the binary file fed to QBinaryJson::fromBinaryData() can cause undefined behaviour because of out-of-bounds read.
Text from CVE List
Affected versions 2
- qtaffected: 5.0.0 through 6.8.8CVE List
- qtaffected: 6.9.0 through 6.11.2CVE List