CVE-2026-107472: Out-of-bounds read vulnerability in QTextCodec TSCII encoding impacts Qt
Published Oct 27, 2026
·Updated
An out-of-bounds read vulnerability in the QTextCodec TSCII encoding of the Qt 5 Compatibility APIs module (Qt Core in Qt 5 and earlier) impacts Qt. Applications that convert text to the TSCII encoding through QTextCodec may read memory outside the input buffer, which can cause the application to crash or misinterpret the data.
Affected Software
1 affected component
Qt Qt Core
Event History
Oct 27, 2026
CVE Published
via MITRE·07:32 AM
Data Sourced
via MITRE·07:32 AM
DescriptionWeakness
Frequently Asked Questions
1
Which applications are exposed to this issue?
Applications using the Qt 5 Compatibility APIs module, or Qt Core in Qt 5 and earlier, are affected when they convert text to the TSCII encoding through QTextCodec.
2
What must occur for exploitation to be possible?
The application must process text through QTextCodec using the TSCII encoding. The out-of-bounds read occurs during that conversion and may cause a crash or data misinterpretation.