CVE-2026-101201
Awaiting Analysis Awaiting Analysis - Queue

Out-of-Bounds Read in Qt QBinaryJson

Publication date: 2026-10-20

Last updated on: 2026-10-20

Assigner: TQtC

Description
A malformed header in the binary file fed to QBinaryJson::fromBinaryData() can cause undefined behaviour because of out-of-bounds read.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-20
Last Modified
2026-10-20
Generated
2026-11-09
AI Q&A
2026-10-20
EPSS Evaluated
2026-11-08
NVD
CVE-2026-101201
EUVD
EUVD-2026-104838

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
qt qt 5.0.0
qt qt 6.9.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-190 The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves a malformed header in a binary file processed by QBinaryJson::fromBinaryData(). The issue causes undefined behavior due to an out-of-bounds read, which means the program may attempt to access memory outside the intended range.

Detection Guidance

This vulnerability involves a malformed header causing an out-of-bounds read in QBinaryJson::fromBinaryData(). Detection requires inspecting binary data processed by Qt applications. Check logs for crashes or errors related to JSON parsing in Qt-based software. Use tools like 'strings' or 'hexdump' to analyze binary files for malformed headers before processing.

Impact Analysis

An out-of-bounds read can lead to crashes, data corruption, or unintended code execution. Attackers might exploit this to gain unauthorized access or disrupt system operations.

Compliance Impact

The vulnerability involves an out-of-bounds read due to a malformed header in binary data processing, which could lead to undefined behavior. This type of memory corruption issue may compromise data integrity and confidentiality, potentially violating requirements under GDPR (e.g., Article 32 on security of processing) and HIPAA (e.g., Security Rule safeguards for protected health information). However, specific compliance impacts depend on deployment context and mitigations in place.

Mitigation Strategies

Update Qt libraries to the latest patched version to address the out-of-bounds read vulnerability in QBinaryJson::fromBinaryData(). Monitor Qt security advisories for patches and apply them promptly.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-101201. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...