All vulnerabilities
CVE-2026-105946

qt: Out-of-bounds read vulnerability in NTLM authentication handling impacts Qt

qt qt
Open in ThreatlineRecord JSON
CVSS
5.3Medium
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed in6.8.10Also 6.11.2CVE List
Published27 Oct 2026Updated 27 Oct 2026CVE List

What fixes it

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

Out-of-bounds read in the QAuthenticator NTLM authentication handling in the Qt Network module in Qt Group Qt allows remote attackers to obtain sensitive information (heap memory contents) or cause a denial of service (application crash) via a crafted NTLM challenge sent by a malicious server or proxy, when an application using QNetworkAccessManager or QTcpSocket authenticates with NTLM.

Text from CVE List

Affected versions 3

  • qtunknown: all versions before 6.8.0CVE List
  • qtaffected: 6.8.0 before 6.8.10CVE List
  • qtaffected: 6.9.0 before 6.11.2CVE List

References 4