CVE-2026-111487: Out-of-bounds write vulnerability in the assimp scene import plugin of Qt3D impacts Qt Framework
Published Oct 30, 2026
·Updated
An out-of-bounds write vulnerability in the Qt Framework assimp scene import plugin of the Qt3D module.
Event History
Oct 30, 2026
CVE Published
via MITRE·02:21 PM
Data Sourced
via MITRE·02:21 PM
DescriptionWeakness
Data Sourced
via NVD·03:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
The vector indicates local access is required and no privileges are needed. User interaction is also required.
2
Which applications are most relevant to triage?
Applications using the Qt3D module's assimp scene import plugin are the relevant exposure scope. The provided information does not establish whether the plugin is enabled or used by default.
3
What is the likely security impact if exploitation succeeds?
The supplied severity vector indicates no confidentiality impact, but high integrity and availability impact.