🔐 CVE Alert

CVE-2026-103653

UNKNOWN 0.0

Out-of-bounds read vulnerability in CoAP message parsing impacts Qt CoAP

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

An out-of-bounds read vulnerability in the Qt CoAP message parsing (QCoapInternalReply::createFromFrame()) of the Qt CoAP module. Processing a malformed CoAP message can cause an application using Qt CoAP to crash (loss of availability) or to continue operating on incorrect data (potential loss of integrity).

CWE CWE-125
Vendor qt
Product qt
Published Nov 3, 2026
Stay Ahead of the Next One

Get instant alerts for qt qt

Be the first to know when new unknown vulnerabilities affecting qt qt are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

qt / Qt
5.13.0 ≤ 6.8.8 6.9.0 ≤ 6.11.2

References

NVD ↗ CVE.org ↗ EPSS Data ↗
wiki.qt.io: https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-103653: codereview.qt-project.org: https://codereview.qt-project.org/c/qt/qtcoap/+/760652 codereview.qt-project.org: https://codereview.qt-project.org/c/qt/qtcoap/+/761120