← All advisories

High severityNVD Advisory· Published Sep 16, 2026· Updated Sep 18, 2026

CVE-2026-19248

CVE-2026-19248

Description

QDomDocument XML parsing is vulnerable to a remotely-triggerable denial-of-service crash when processing untrusted input.

Affected products

11

Qt/Qtbaseinferred
osv-coords10 versions
pkg:rpm/almalinux/qt5-qtbase pkg:rpm/almalinux/qt5-qtbase-common pkg:rpm/almalinux/qt5-qtbase-devel pkg:rpm/almalinux/qt5-qtbase-examples pkg:rpm/almalinux/qt5-qtbase-gui pkg:rpm/almalinux/qt5-qtbase-mysql pkg:rpm/almalinux/qt5-qtbase-odbc pkg:rpm/almalinux/qt5-qtbase-postgresql pkg:rpm/almalinux/qt5-qtbase-private-devel pkg:rpm/almalinux/qt5-qtbase-static
< 5.15.9-11.el9_8.2+ 9 more
- (no CPE)range: < 5.15.9-11.el9_8.2
- (no CPE)range: < 5.15.9-11.el9_8.2
- (no CPE)range: < 5.15.9-11.el9_8.2
- (no CPE)range: < 5.15.9-11.el9_8.2
- (no CPE)range: < 5.15.9-11.el9_8.2
- (no CPE)range: < 5.15.9-11.el9_8.2
- (no CPE)range: < 5.15.9-11.el9_8.2
- (no CPE)range: < 5.15.9-11.el9_8.2
- (no CPE)range: < 5.15.9-11.el9_8.2
- (no CPE)range: < 5.15.9-11.el9_8.2

Patches

Vulnerability mechanics

References

1

codereview.qt-project.org/c/qt/qtbase/+/740427nvd

News mentions

0

No linked articles in our index yet.