CVE-2026-107457: Out-of-bounds Read

Published Nov 2, 2026

Updated

A memory corruption vulnerability in the QMqttClient class of the Qt MQTT module. Under certain MQTT 5 connection settings between client and server, QMqttClient may corrupt memory, which can cause the application to crash.

Event History

Nov 2, 2026

CVE Published

via NVD·09:17 AM

Data Sourced

via NVD·09:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are potentially exposed?

Applications that use Qt MQTT's QMqttClient and establish MQTT 5 connections may be exposed when the relevant client-server connection settings are present. The provided data does not identify affected Qt versions or whether default configurations use those settings.

What access would an attacker need?

The CVSS vector indicates network reachability, no required privileges, low attack complexity, and required user interaction. It also indicates an additional attack requirement, but the provided data does not specify what that requirement is.

CVE-2026-107457: Out-of-bounds Read

Event History

Frequently Asked Questions

Which deployments are potentially exposed?

What access would an attacker need?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are potentially exposed?

What access would an attacker need?