CVE-2026-105946: Out-of-bounds read vulnerability in NTLM authentication handling impacts Qt
Out-of-bounds read in the QAuthenticator NTLM authentication handling in the Qt Network module in Qt Group Qt allows remote attackers to obtain sensitive information (heap memory contents) or cause a denial of service (application crash) via a crafted NTLM challenge sent by a malicious server or proxy, when an application using QNetworkAccessManager or QTcpSocket authenticates with NTLM.
Affected Software
Event History
Frequently Asked Questions
Which applications are exposed to this issue?
Applications using the Qt Network module are exposed when they use QNetworkAccessManager or QTcpSocket and authenticate with NTLM. The vulnerable handling is in QAuthenticator's NTLM authentication processing.
What does an attacker need to exploit the vulnerability?
The attacker must be able to send a crafted NTLM challenge as a malicious server or proxy during NTLM authentication. Successful exploitation can disclose heap memory contents or crash the application.