Out-of-bounds Read in Qt

CVE-2026-9499

An out-of-bounds read (buffer over-read) vulnerability exists in QTextCodec::codecForName() in Qt. When the function is called with a QByteArray that is not NUL-terminated (for example, one created with QByteArray::fromRawData()), the code…

Vulnerability class: Buffer Overflow

Affected products

  • Qt — versions 6.0.0, 6.9.0, 4.0.0

Weakness classification (CWE)

References