DEBIAN-CVE-2026-105924: Null Pointer Dereference

Published Oct 30, 2026

Updated

A NULL pointer dereference vulnerability in the Qt QCborValue to JSON conversion of the Qt Core module.

Affected Software

6 affected components

debian/qt6-base*

debian/qtbase-opensource-src*

Event History

Oct 30, 2026

CVE Published

via OSV·12:16 PM

Data Sourced

via OSV·12:16 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the likely security impact?

Successful exploitation can cause a high availability impact through a NULL pointer dereference. The supplied metrics indicate no confidentiality or integrity impact.

What access does an attacker need?

The vulnerability is rated with a local attack vector and requires user interaction. No privileges are required according to the supplied metrics.

Which Debian packages are identified as affected?

The listed software is debian/qt6-base and debian/qtbase-opensource-src.

DEBIAN-CVE-2026-105924: Null Pointer Dereference

Affected Software

Event History

Frequently Asked Questions

What is the likely security impact?

What access does an attacker need?

Which Debian packages are identified as affected?

Company

Resources

Contact

Frequently Asked Questions

What is the likely security impact?

What access does an attacker need?

Which Debian packages are identified as affected?