CVE-2026-97845: Uncontrolled recursion vulnerability in QXmlSimpleReader XML parsing impacts Qt
Published Nov 12, 2026
·Updated
An uncontrolled recursion vulnerability has been discovered in the Qt QXmlSimpleReader XML parsing functionality of the Qt 5 Core Compatibility APIs module (Qt 6) and the Qt XML module (Qt 5).
Event History
Nov 12, 2026
CVE Published
via MITRE·01:08 PM
Data Sourced
via MITRE·01:08 PM
DescriptionWeakness
Data Sourced
via NVD·02:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What access and interaction does exploitation require?
The supplied CVSS vector indicates a local attack vector, low attack complexity, no privileges required, and user interaction required.
2
What is the assessed security impact?
The assessment indicates high impact to availability, with no assessed impact to confidentiality or integrity. Scope is unchanged, and no subsequent-system impacts are identified.