CVE-2026-103653
Received Received - Intake

Out-of-Bounds Read in Qt CoAP Message Parsing

Publication date: 2026-11-03

Last updated on: 2026-11-03

Assigner: TQtC

Description
An out-of-bounds read vulnerability in the Qt CoAP message parsing (QCoapInternalReply::createFromFrame()) of the Qt CoAP module. Processing a malformed CoAP message can cause an application using Qt CoAP to crash (loss of availability) or to continue operating on incorrect data (potential loss of integrity).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-03
Last Modified
2026-11-03
Generated
2026-11-03
AI Q&A
2026-11-03
EPSS Evaluated
N/A
NVD
CVE-2026-103653
EUVD
EUVD-2026-115724

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
qt Qt 5.13.0
qt Qt 6.9.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is an out-of-bounds read vulnerability in the Qt CoAP message parsing function QCoapInternalReply::createFromFrame(). When a malformed CoAP message is processed, it can cause an application using Qt CoAP to crash, leading to loss of availability, or to continue operating on incorrect data, potentially causing loss of integrity.

Impact Analysis

An attacker could exploit this vulnerability by sending a specially crafted CoAP message to crash the application or manipulate it into processing incorrect data. This may result in service disruption or unintended behavior in systems relying on Qt CoAP for communication.

Mitigation Strategies

Update Qt CoAP to the latest patched version to address the out-of-bounds read vulnerability in message parsing. Monitor network traffic for malformed CoAP messages that may trigger crashes or data corruption.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-103653. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...