Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| qt | qt | unaffected |
|
No data.
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Tue, 27 Oct 2026 07:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Out-of-bounds read in the QAuthenticator NTLM authentication handling in the Qt Network module in Qt Group Qt allows remote attackers to obtain sensitive information (heap memory contents) or cause a denial of service (application crash) via a crafted NTLM challenge sent by a malicious server or proxy, when an application using QNetworkAccessManager or QTcpSocket authenticates with NTLM. | |
| Title | Out-of-bounds read vulnerability in NTLM authentication handling impacts Qt | |
| First Time appeared |
Qt
Qt qt Qt qtbase |
|
| Weaknesses | CWE-125 | |
| CPEs | cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:* cpe:2.3:a:qt:qtbase:*:*:*:*:*:*:*:* |
|
| Vendors & Products |
Qt
Qt qt Qt qtbase |
|
| References |
| |
| Metrics |
cvssV4_0
|
MITRE
Status: PUBLISHED
Assigner: Qt
Published:
Updated: 2026-10-27T06:45:36.400Z
Reserved: 2026-10-06T07:24:45.304Z
Link: CVE-2026-105946
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-10-27T07:16:31.860
Modified: 2026-10-27T07:16:31.860
Link: CVE-2026-105946
Redhat
No data.
OpenCVE Enrichment
No data.
-
CWE-125
Out-of-bounds Read