DEBIAN-CVE-2026-111487: Medium severity debian/qt3d-opensource-src vulnerability

Published Oct 30, 2026

Updated

An out-of-bounds write vulnerability in the Qt Framework assimp scene import plugin of the Qt3D module.

Affected Software

6 affected components

debian/qt3d-opensource-src*

debian/qt6-3d*

Event History

Oct 30, 2026

CVE Published

via OSV·03:16 PM

Data Sourced

via OSV·03:16 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What level of access and interaction are required for exploitation?

The vulnerability has a local attack vector, requires no privileges, and requires user interaction. The available data does not describe the specific interaction or delivery method.

Which Debian software packages are identified as affected?

The listed affected software is debian/qt3d-opensource-src and debian/qt6-3d.

What is the expected security impact if exploitation succeeds?

The supplied metrics indicate no confidentiality impact, with high integrity and availability impact. The scope is unchanged.

DEBIAN-CVE-2026-111487: Medium severity debian/qt3d-opensource-src vulnerability

Affected Software

Event History

Frequently Asked Questions

What level of access and interaction are required for exploitation?

Which Debian software packages are identified as affected?

What is the expected security impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

What level of access and interaction are required for exploitation?

Which Debian software packages are identified as affected?

What is the expected security impact if exploitation succeeds?