CVE-2026-107479
Received Received - Intake

Integer Truncation in Qt Framework Core APIs

Publication date: 2026-11-04

Last updated on: 2026-11-04

Assigner: TQtC

Description
An integer truncation vulnerability in the QTextCodec conversion functions of the Qt 5 Core Compatibility APIs module impacts the Qt Framework. An application using the affected functionality could crash.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-04
Last Modified
2026-11-04
Generated
2026-11-04
AI Q&A
2026-11-04
EPSS Evaluated
N/A
NVD
CVE-2026-107479
EUVD
EUVD-2026-116890

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
qt Qt 5.0.0
qt Qt 6.9.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-197 Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an integer truncation issue in the QTextCodec conversion functions of the Qt 5 Core Compatibility APIs module. It affects the Qt Framework and could cause an application using the vulnerable functionality to crash.

Impact Analysis

The vulnerability may lead to application crashes when processing certain text conversions. Since it has a low CVSS base score of 1.7, the impact is limited primarily to denial of service rather than data breaches or code execution.

Mitigation Strategies

Update Qt Framework to the latest version to address the integer truncation vulnerability in QTextCodec conversion functions. Monitor application crashes related to Qt Core Compatibility APIs.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-107479. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...