CVE-2026-101201: QBinaryJson::fromBinaryData() integer overflow leading to OOB read
Published Oct 20, 2026
·Updated
A malformed header in the binary file fed to QBinaryJson::fromBinaryData() can cause undefined behaviour because of out-of-bounds read.
Affected Software
1 affected component
Qt QT
Event History
Oct 20, 2026
CVE Published
via MITRE·08:20 AM
Data Sourced
via MITRE·08:20 AM
DescriptionWeakness
Frequently Asked Questions
1
Which deployments should be prioritized for triage?
Prioritize Qt applications that use QBinaryJson::fromBinaryData() to process binary data, particularly where that data can originate from untrusted sources.
2
Are affected versions or default-configuration exposure identified?
The provided information does not identify affected or fixed Qt versions, nor does it state whether any default configuration is affected.
3
Is a fix reference available?
Two Qt code-review changes are referenced: qt5compat changes 758925 and 759230. The provided data does not state which releases include those changes.