CVE-2026-101201

A malformed header in the binary file fed to QBinaryJson::fromBinaryData() can cause undefined behaviour because of out-of-bounds read.

Score

CVSS 4.0 4.3 Medium

Status

Awaiting Analysis - a59d8014-47c4-4630-ab43-e1b13cbe58e3

Published

2026-10-20

Last modified

2026-10-20

Weaknesses

CWE-125, CWE-190

Affected products

• Qt (Qt)
• Qt5compat (Qt)
• Qtbase (Qt)

References

• https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-101201
• https://codereview.qt-project.org/c/qt/qt5compat/+/758925
• https://codereview.qt-project.org/c/qt/qt5compat/+/759230