CVE-2026-103645 - Vulnerability Details - OpenCVE

ReportizFlow

An integer overflow vulnerability in the Qt QTextCodec fromUnicode() and toUnicode() functionality of the Qt 5 Core Compatibility APIs module (Qt 6) and the Qt Core module (Qt 5). Only builds where Qt is compiled with ICU support are affected.

Attack Vector Local

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction Passive

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact Low

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Qt	Qt Qt5compat Qt Framework Qtbase

No data.

No data.

References

Link	Providers
https://codereview.qt-project.org/c/qt/qt5compat/+/762795
https://www.qt.io/security-advisories?search=CVE-2026-103645

History

Fri, 13 Nov 2026 19:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Qt qt Framework
Vendors & Products		Qt qt Framework

Fri, 13 Nov 2026 09:45:00 +0000

Type	Values Removed	Values Added
Description		An integer overflow vulnerability in the Qt QTextCodec fromUnicode() and toUnicode() functionality of the Qt 5 Core Compatibility APIs module (Qt 6) and the Qt Core module (Qt 5). Only builds where Qt is compiled with ICU support are affected.
Title		Integer overflow vulnerability in QTextCodec fromUnicode() and toUnicode() impacts Qt
First Time appeared		Qt Qt qt Qt qt5compat Qt qtbase
Weaknesses		CWE-190 CWE-835
CPEs		cpe:2.3:a:qt:qt5compat:::::::: cpe:2.3:a:qt:qt:::::::: cpe:2.3:a:qt:qtbase::::::::
Vendors & Products		Qt Qt qt Qt qt5compat Qt qtbase
References		https://codereview.qt-project.org/c/qt/qt5compat/+/762795 https://www.qt.io/security-advisories?search=CVE-2026-103645
Metrics		cvssV4_0 `{'score': 1.1, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/R:U/U:Clear'}`

MITRE

Status: PUBLISHED

Assigner: Qt

Published: 2026-11-13T09:36:23.530Z

Updated: 2026-11-13T09:36:23.530Z

Reserved: 2026-10-01T06:20:58.674Z

Link: CVE-2026-103645

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-11-13T10:17:24.573

Modified: 2026-11-13T10:17:24.573

Link: CVE-2026-103645

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-103645", "assignerOrgId": "a59d8014-47c4-4630-ab43-e1b13cbe58e3", "state": "PUBLISHED", "assignerShortName": "Qt", "dateReserved": "2026-10-01T06:20:58.674Z", "datePublished": "2026-11-13T09:36:23.530Z", "dateUpdated": "2026-11-13T09:36:23.530Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "a59d8014-47c4-4630-ab43-e1b13cbe58e3", "shortName": "Qt", "dateUpdated": "2026-11-13T09:36:23.530Z"}, "title": "Integer overflow vulnerability in QTextCodec fromUnicode() and toUnicode() impacts Qt", "datePublic": "2026-11-13T09:30:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-190", "description": "CWE-190 Integer Overflow or Wraparound", "type": "CWE"}]}, {"descriptions": [{"lang": "en", "cweId": "CWE-835", "description": "CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-92", "descriptions": [{"lang": "en", "value": "CAPEC-92 Forced Integer Overflow"}]}], "affected": [{"vendor": "qt", "product": "qt", "modules": ["qtbase", "qt5compat"], "versions": [{"status": "unknown", "version": "0", "lessThan": "5.0.0", "versionType": "python"}, {"status": "affected", "version": "5.0.0", "lessThan": "6.8.9", "versionType": "python"}, {"status": "affected", "version": "6.9.0", "lessThan": "6.11.3", "versionType": "python"}], "defaultStatus": "unaffected", "cpes": ["cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*", "cpe:2.3:a:qt:qtbase:*:*:*:*:*:*:*:*", "cpe:2.3:a:qt:qt5compat:*:*:*:*:*:*:*:*"]}], "cpeApplicability": [{"operator": "OR", "nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.0.0", "versionEndExcluding": "6.8.9"}, {"vulnerable": true, "criteria": "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.9.0", "versionEndExcluding": "6.11.3"}, {"vulnerable": true, "criteria": "cpe:2.3:a:qt:qtbase:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.0.0", "versionEndExcluding": "6.0.0"}, {"vulnerable": true, "criteria": "cpe:2.3:a:qt:qt5compat:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.0.0", "versionEndExcluding": "6.8.9"}, {"vulnerable": true, "criteria": "cpe:2.3:a:qt:qt5compat:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.9.0", "versionEndExcluding": "6.11.3"}]}]}], "descriptions": [{"lang": "en", "value": "An integer overflow vulnerability in the Qt QTextCodec fromUnicode() and toUnicode() functionality of the Qt 5 Core Compatibility APIs module (Qt 6) and the Qt Core module (Qt 5). Only builds where Qt is compiled with ICU support are affected.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>An integer overflow vulnerability in the Qt <code>QTextCodec</code> <code>fromUnicode()</code> and <code>toUnicode()</code> functionality of the Qt 5 Core Compatibility APIs module (Qt 6) and the Qt Core module (Qt 5). Only builds where Qt is compiled with ICU support are affected.</p>"}]}], "references": [{"url": "https://www.qt.io/security-advisories?search=CVE-2026-103645", "tags": ["vendor-advisory"]}, {"url": "https://codereview.qt-project.org/c/qt/qt5compat/+/762795", "tags": ["patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "LOCAL", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "PASSIVE", "vulnConfidentialityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "LOW", "subAvailabilityImpact": "NONE", "exploitMaturity": "UNREPORTED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "USER", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "CLEAR", "version": "4.0", "baseSeverity": "LOW", "baseScore": 1.1, "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/R:U/U:Clear"}}], "source": {"discovery": "INTERNAL"}, "x_generator": {"engine": "Vulnogram 1.0.5"}}}}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*", "cpe:2.3:a:qt:qtbase:*:*:*:*:*:*:*:*", "cpe:2.3:a:qt:qt5compat:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "modules": ["qtbase", "qt5compat"], "product": "qt", "vendor": "qt", "versions": [{"lessThan": "5.0.0", "status": "unknown", "version": "0", "versionType": "python"}, {"lessThan": "6.8.9", "status": "affected", "version": "5.0.0", "versionType": "python"}, {"lessThan": "6.11.3", "status": "affected", "version": "6.9.0", "versionType": "python"}]}], "source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An integer overflow vulnerability in the Qt QTextCodec fromUnicode() and toUnicode() functionality of the Qt 5 Core Compatibility APIs module (Qt 6) and the Qt Core module (Qt 5). Only builds where Qt is compiled with ICU support are affected."}], "id": "CVE-2026-103645", "lastModified": "2026-11-13T10:17:24.573", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "USER", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 1.1, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "UNREPORTED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "CLEAR", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "PASSIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:U/V:X/RE:X/U:Clear", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3", "type": "Secondary"}]}, "published": "2026-11-13T10:17:24.573", "references": [{"source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3", "url": "https://codereview.qt-project.org/c/qt/qt5compat/+/762795"}, {"source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3", "url": "https://www.qt.io/security-advisories?search=CVE-2026-103645"}], "sourceIdentifier": "a59d8014-47c4-4630-ab43-e1b13cbe58e3", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-190"}, {"lang": "en", "value": "CWE-835"}], "source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3", "type": "Secondary"}]}