CVE-2026-95620: Use-after-free vulnerability in QNetworkAccessManager HTTP/2 support impacts Qt

Published Oct 23, 2026

Updated

A use-after-free vulnerability in the Qt QNetworkAccessManager HTTP/2 client support of the Qt Network module allows a malicious or compromised HTTP/2 server to cause the client application to crash, affecting availability.

Affected Software

1 affected component

Qt Qt Network

Event History

Oct 23, 2026

CVE Published

via MITRE·10:56 AM

Data Sourced

via MITRE·10:56 AM

DescriptionWeakness

Frequently Asked Questions

Which applications are exposed to this issue?

Client applications using the Qt Network module's QNetworkAccessManager HTTP/2 support are exposed when they connect to a malicious or compromised HTTP/2 server.

What does an attacker need to exploit the vulnerability?

An attacker needs to control, or compromise, an HTTP/2 server that the affected client application connects to. The documented impact is an application crash affecting availability.

CVE-2026-95620: Use-after-free vulnerability in QNetworkAccessManager HTTP/2 support impacts Qt

Affected Software

Event History

Frequently Asked Questions

Which applications are exposed to this issue?

What does an attacker need to exploit the vulnerability?

Company

Resources

Contact

Frequently Asked Questions

Which applications are exposed to this issue?

What does an attacker need to exploit the vulnerability?