https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:19:46 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:65816 <p><strong>Affected:</strong> AlmaLinux:10: qt6-qt5compat, AlmaLinux:10: qt6-qt5compat-devel, AlmaLinux:10: qt6-qt5compat-examples</p> <p>Qt6 - Qt 5 Compatibility Libraries.</p> <p>Security Fix(es):</p> <p>* qt: Qt: Denial of Service via out-of-bounds read in text codec handling (CVE-2026-9499)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:10: qt6-qt5compat, AlmaLinux:10: qt6-qt5compat-devel, AlmaLinux:10: qt6-qt5compat-examples</p> <p>Qt6 - Qt 5 Compatibility Libraries.</p> <p>Security Fix(es):</p> <p>* qt: Qt: Denial of Service via out-of-bounds read in text codec handling (CVE-2026-9499)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:65816 https://cve.radiocsirt.org/vuln/euvd-2026-339615 EUVD-2026-339615 https://cve.radiocsirt.org/vuln/euvd-2026-339615 https://cve.radiocsirt.org/vuln/fkie_cve-2026-9499 <p>An out-of-bounds read (buffer over-read) vulnerability exists in QTextCodec::codecForName() in Qt. When the function is called with a QByteArray that is not NUL-terminated (for example, one created with QByteArray::fromRawData()), the codec-name matching routine reads past the end of the supplied buffer. In most cases this results in an incorrect text codec being selected; in the worst case, if the over-read reaches unmapped memory, the process crashes (denial of service). The over-read is bounded by the length of the longest codec-name candidate, and the out-of-bounds bytes are only compared internally against Qt&#39;s fixed list of codec names, so no data is disclosed to an attacker. Applications that do not pass non-NUL-terminated QByteArrays to QTextCodec::codecForName() are not exposed. The affected code resides in the Qt5Compat module from Qt 6.0.0 onward, and in Qt Core (qtbase) in Qt 4.x and Qt 5.x.</p> <p>An out-of-bounds read (buffer over-read) vulnerability exists in QTextCodec::codecForName() in Qt. When the function is called with a QByteArray that is not NUL-terminated (for example, one created with QByteArray::fromRawData()), the codec-name matching routine reads past the end of the supplied buffer. In most cases this results in an incorrect text codec being selected; in the worst case, if the over-read reaches unmapped memory, the process crashes (denial of service). The over-read is bounded by the length of the longest codec-name candidate, and the out-of-bounds bytes are only compared internally against Qt&#39;s fixed list of codec names, so no data is disclosed to an attacker. Applications that do not pass non-NUL-terminated QByteArrays to QTextCodec::codecForName() are not exposed. The affected code resides in the Qt5Compat module from Qt 6.0.0 onward, and in Qt Core (qtbase) in Qt 4.x and Qt 5.x.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-9499 https://cve.radiocsirt.org/vuln/ghsa-8cm2-5hwv-mhv9 <p>An out-of-bounds read (buffer over-read) vulnerability exists in QTextCodec::codecForName() in Qt. When the function is called with a QByteArray that is not NUL-terminated (for example, one created with QByteArray::fromRawData()), the codec-name matching routine reads past the end of the supplied buffer. In most cases this results in an incorrect text codec being selected; in the worst case, if the over-read reaches unmapped memory, the process crashes (denial of service). The over-read is bounded by the length of the longest codec-name candidate, and the out-of-bounds bytes are only compared internally against Qt&#39;s fixed list of codec names, so no data is disclosed to an attacker. Applications that do not pass non-NUL-terminated QByteArrays to QTextCodec::codecForName() are not exposed. The affected code resides in the Qt5Compat module from Qt 6.0.0 onward, and in Qt Core (qtbase) in Qt 4.x and Qt 5.x.</p> <p>An out-of-bounds read (buffer over-read) vulnerability exists in QTextCodec::codecForName() in Qt. When the function is called with a QByteArray that is not NUL-terminated (for example, one created with QByteArray::fromRawData()), the codec-name matching routine reads past the end of the supplied buffer. In most cases this results in an incorrect text codec being selected; in the worst case, if the over-read reaches unmapped memory, the process crashes (denial of service). The over-read is bounded by the length of the longest codec-name candidate, and the out-of-bounds bytes are only compared internally against Qt&#39;s fixed list of codec names, so no data is disclosed to an attacker. Applications that do not pass non-NUL-terminated QByteArrays to QTextCodec::codecForName() are not exposed. The affected code resides in the Qt5Compat module from Qt 6.0.0 onward, and in Qt Core (qtbase) in Qt 4.x and Qt 5.x.</p> https://cve.radiocsirt.org/vuln/ghsa-8cm2-5hwv-mhv9 https://cve.radiocsirt.org/vuln/oesa-2026-3202 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: qt6-qt5compat</p> <p>. Security Fix(es):</p> <p>An out-of-bounds read (buffer over-read) vulnerability exists in QTextCodec::codecForName() in Qt. When the function is called with a QByteArray that is not NUL-terminated (for example, one created with QByteArray::fromRawData()), the codec-name matching routine reads past the end of the supplied buffer. In most cases this results in an incorrect text codec being selected; in the worst case, if the over-read reaches unmapped memory, the process crashes (denial of service). The over-read is bounded by the length of the longest codec-name candidate, and the out-of-bounds bytes are only compared internally against Qt&amp;apos;s fixed list of codec names, so no data is disclosed to an attacker. Applications that do not pass non-NUL-terminated QByteArrays to QTextCodec::codecForName() are not exposed. The affected code resides in the Qt5Compat module from Qt 6.0.0 onward, and in Qt Core (qtbase) in Qt 4.x and Qt 5.x.(CVE-2026-9499)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: qt6-qt5compat</p> <p>. Security Fix(es):</p> <p>An out-of-bounds read (buffer over-read) vulnerability exists in QTextCodec::codecForName() in Qt. When the function is called with a QByteArray that is not NUL-terminated (for example, one created with QByteArray::fromRawData()), the codec-name matching routine reads past the end of the supplied buffer. In most cases this results in an incorrect text codec being selected; in the worst case, if the over-read reaches unmapped memory, the process crashes (denial of service). The over-read is bounded by the length of the longest codec-name candidate, and the out-of-bounds bytes are only compared internally against Qt&amp;apos;s fixed list of codec names, so no data is disclosed to an attacker. Applications that do not pass non-NUL-terminated QByteArrays to QTextCodec::codecForName() are not exposed. The affected code resides in the Qt5Compat module from Qt 6.0.0 onward, and in Qt Core (qtbase) in Qt 4.x and Qt 5.x.(CVE-2026-9499)</p> https://cve.radiocsirt.org/vuln/oesa-2026-3202 https://cve.radiocsirt.org/vuln/rhsa-2026:41389 <p>qt: Qt: Denial of Service via out-of-bounds read in text codec handling</p> <p>qt: Qt: Denial of Service via out-of-bounds read in text codec handling</p> https://cve.radiocsirt.org/vuln/rhsa-2026:41389 https://cve.radiocsirt.org/vuln/rhsa-2026:65816 <p>qt: Qt: Denial of Service via out-of-bounds read in text codec handling</p> <p>qt: Qt: Denial of Service via out-of-bounds read in text codec handling</p> https://cve.radiocsirt.org/vuln/rhsa-2026:65816 https://cve.radiocsirt.org/vuln/rlsa-2026:65816 <p><strong>Affected:</strong> Rocky Linux:10: qt6-qt5compat</p> <p>Qt6 - Qt 5 Compatibility Libraries.</p> <p>Security Fix(es):</p> <p>* qt: Qt: Denial of Service via out-of-bounds read in text codec handling (CVE-2026-9499)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> Rocky Linux:10: qt6-qt5compat</p> <p>Qt6 - Qt 5 Compatibility Libraries.</p> <p>Security Fix(es):</p> <p>* qt: Qt: Denial of Service via out-of-bounds read in text codec handling (CVE-2026-9499)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/rlsa-2026:65816 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-9499 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: qtbase-opensource-src, Ubuntu:Pro:18.04:LTS: qtbase-opensource-src, Ubuntu:Pro:20.04:LTS: qtbase-opensource-src, Ubuntu:22.04:LTS: qt6-5compat, Ubuntu:Pro:22.04:LTS: qtbase-opensource-src, Ubuntu:24.04:LTS: qt6-5compat, Ubuntu:Pro:24.04:LTS: qtbase-opensource-src, Ubuntu:26.04:LTS: qt6-5compat, Ubuntu:26.04:LTS: qtbase-opensource-src</p> <p>An out-of-bounds read (buffer over-read) vulnerability exists in QTextCodec::codecForName() in Qt. When the function is called with a QByteArray that is not NUL-terminated (for example, one created with QByteArray::fromRawData()), the codec-name matching routine reads past the end of the supplied buffer. In most cases this results in an incorrect text codec being selected; in the worst case, if the over-read reaches unmapped memory, the process crashes (denial of service). The over-read is bounded by the length of the longest codec-name candidate, and the out-of-bounds bytes are only compared internally against Qt&#39;s fixed list of codec names, so no data is disclosed to an attacker. Applications that do not pass non-NUL-terminated QByteArrays to QTextCodec::codecForName() are not exposed. The affected code resides in the Qt5Compat module from Qt 6.0.0 onward, and in Qt Core (qtbase) in Qt 4.x and Qt 5.x.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: qtbase-opensource-src, Ubuntu:Pro:18.04:LTS: qtbase-opensource-src, Ubuntu:Pro:20.04:LTS: qtbase-opensource-src, Ubuntu:22.04:LTS: qt6-5compat, Ubuntu:Pro:22.04:LTS: qtbase-opensource-src, Ubuntu:24.04:LTS: qt6-5compat, Ubuntu:Pro:24.04:LTS: qtbase-opensource-src, Ubuntu:26.04:LTS: qt6-5compat, Ubuntu:26.04:LTS: qtbase-opensource-src</p> <p>An out-of-bounds read (buffer over-read) vulnerability exists in QTextCodec::codecForName() in Qt. When the function is called with a QByteArray that is not NUL-terminated (for example, one created with QByteArray::fromRawData()), the codec-name matching routine reads past the end of the supplied buffer. In most cases this results in an incorrect text codec being selected; in the worst case, if the over-read reaches unmapped memory, the process crashes (denial of service). The over-read is bounded by the length of the longest codec-name candidate, and the out-of-bounds bytes are only compared internally against Qt&#39;s fixed list of codec names, so no data is disclosed to an attacker. Applications that do not pass non-NUL-terminated QByteArrays to QTextCodec::codecForName() are not exposed. The affected code resides in the Qt5Compat module from Qt 6.0.0 onward, and in Qt Core (qtbase) in Qt 4.x and Qt 5.x.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-9499 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2459 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in QT ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in QT ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2459