anonhaven

CVE-2026-101201

MEDIUM CVSS 4.0: 4.3 EPSS 0.13%
Updated Oct 20, 2026
Qt
Parameter Value
CVSS 4.3 (MEDIUM)
Type CWE-125 (Out-of-bounds Read), CWE-190 (Integer Overflow)
Vendor Qt
Public PoC No

A malformed header in the binary file fed to QBinaryJson::fromBinaryData() can cause undefined behaviour because of out-of-bounds read.

Attack Parameters

Attack Vector
Local
Requires local access
Attack Complexity
Low
Easy to exploit
Attack Requirements
None
No additional conditions
Privileges Required
None
No privileges needed
User Interaction
Passive
Minimal interaction

Impact Assessment

Confidentiality
None
No data leak
Integrity
None
No data modification
Availability
High
Complete denial of service

CVSS Vector v4.0

Weakness Type (CWE)

CWE-125 Out-of-bounds Read
CWE-190 Integer Overflow

Vulnerable Products

qt:qt

References 3

https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-101201
Qt Wiki: List of known vulnerabilities in Qt products
https://codereview.qt-project.org/c/qt/qt5compat/+/758925
dev patch 1
https://codereview.qt-project.org/c/qt/qt5compat/+/759230
dev patch 2
Share Post Share Share Share

Related Vulnerabilities

CVE-2026-94370

Qt

6.5

CVE-2026-95509

Qt

8.8

CVE-2026-79616

Qt

0.6

CVE-2026-11573

Qt

7.1

CVE-2025-14576

Qt

7.4