CVE-2026-96432: Null pointer dereference vulnerability in QNetworkAccessManager impacts Qt

Published Oct 26, 2026

Updated

A malicious or compromised HTTP/2 server withholding SETTINGS ACK can send RSTSTREAM on a completed stream, planting a null pointer, and then send a PUSHPROMISE for that stream, causing a null pointer dereference in the QNetworkAccessManager class of the Qt Network module that crashes the application.

Affected Software

1 affected component

Qt Qt Network

Event History

Oct 26, 2026

CVE Published

via MITRE·11:31 AM

Data Sourced

via MITRE·11:31 AM

DescriptionWeakness

Frequently Asked Questions

What systems are realistically exposed to this issue?

Applications using the QNetworkAccessManager class in the Qt Network module are exposed when they communicate with a malicious or compromised HTTP/2 server.

What must an attacker control or be able to do to trigger the crash?

The attacker needs to operate or compromise an HTTP/2 server used by the application. That server must withhold a SETTINGS ACK, send RST_STREAM on a completed stream, and then send a PUSH_PROMISE for that stream.

What is the impact of successful exploitation?

Successful exploitation causes a null pointer dereference in QNetworkAccessManager, crashing the affected application.

CVE-2026-96432: Null pointer dereference vulnerability in QNetworkAccessManager impacts Qt

Affected Software

Event History

Frequently Asked Questions

What systems are realistically exposed to this issue?

What must an attacker control or be able to do to trigger the crash?

What is the impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

What systems are realistically exposed to this issue?

What must an attacker control or be able to do to trigger the crash?

What is the impact of successful exploitation?