CVE-2026-100140: Integer Overflow
Published Nov 2, 2026
·Updated
An integer overflow vulnerability in the Qt XML parsing (Qt5Compat / QXmlSimpleReader) functionality of Qt.
Affected Software
4 affected components
ubuntu/qt6-5compat*
ubuntu/qt6-5compat*
ubuntu/qt6-5compat*
ubuntu/qt6-5compat*
Event History
Nov 2, 2026
CVE Published
via NVD·12:16 PM
Data Sourced
via NVD·12:16 PM
DescriptionSeverityWeakness
Nov 3, 2026
Data Sourced
via OSV·12:00 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Which Ubuntu package is identified as affected?
The affected software listed is ubuntu/qt6-5compat, specifically its Qt5Compat/QXmlSimpleReader functionality.
2
What access does an attacker need to exploit this issue?
The vector is local and user interaction is required. No privileges are required according to the provided vector.
3
What is the indicated security impact?
The vector indicates no confidentiality impact, low integrity impact, and high availability impact.