CVE-2026-103653: Out-of-bounds read vulnerability in CoAP message parsing impacts Qt CoAP

Published Nov 3, 2026

Updated

An out-of-bounds read vulnerability in the Qt CoAP message parsing (QCoapInternalReply::createFromFrame()) of the Qt CoAP module. Processing a malformed CoAP message can cause an application using Qt CoAP to crash (loss of availability) or to continue operating on incorrect data (potential loss of integrity).

Event History

Nov 3, 2026

CVE Published

via MITRE·07:35 AM

Data Sourced

via MITRE·07:35 AM

DescriptionWeakness

Data Sourced

via NVD·08:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The vulnerability is network-reachable and requires no privileges or user interaction. An attacker needs to cause an application using Qt CoAP to process a malformed CoAP message.

Which applications are exposed?

Applications that use the Qt CoAP module and process CoAP messages are affected by the described parsing flaw. The available information does not identify specific Qt versions or configurations.

What could happen if exploitation succeeds?

A malformed message can cause the affected application to crash, resulting in loss of availability. It may also cause the application to continue operating on incorrect data, creating a potential integrity impact.

CVE-2026-103653: Out-of-bounds read vulnerability in CoAP message parsing impacts Qt CoAP

Event History

Frequently Asked Questions

What access does an attacker need to exploit this issue?

Which applications are exposed?

What could happen if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

Which applications are exposed?

What could happen if exploitation succeeds?