CVE-2026-107157

— UNSCORED

Published 2026-10-26 · Updated 2026-10-27

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Specially crafted CBOR input passed to QCborValue::fromCbor() in Qt Core can cause an out-of-bounds read, which may crash the application and could expose information.

Weaknesses

CWE-125

All references

https://codereview.qt-project.org/c/qt/qtbase/+/745719
https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-107157:

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

LOWCVE-2024-58392PoC
MEDIUMCVE-2024-58397PoC
MEDIUMCVE-2024-58399PoC
MEDIUMCVE-2025-60494PoC
MEDIUMCVE-2025-71438PoC
MEDIUMCVE-2025-71439PoC
MEDIUMCVE-2026-100126
MEDIUMCVE-2026-100130

Related by shared AI tags and CWE weakness class. Browse the full archive.