OESA-2026-4670: qt6-qt5compat security update
. Security Fix(es):
An out-of-bounds read vulnerability in the QTextCodec TSCII encoding of the Qt 5 Compatibility APIs module (Qt Core in Qt 5 and earlier) impacts Qt. Applications that convert text to the TSCII encoding through QTextCodec may read memory outside the input buffer, which can cause the application to crash or misinterpret the data.(CVE-2026-107472)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
openeuler/qt6-qt5compatto a version that resolves this vulnerability.Fixed in 6.5.2-4.oe2403sp1
Event History
Frequently Asked Questions
Which applications are exposed to this issue?
Applications using the Qt 5 Compatibility APIs module are affected if they convert text to the TSCII encoding through QTextCodec. The issue is in the TSCII encoding handling path.
What does exploitation require?
An attacker would need to cause an affected application to process text through QTextCodec using the TSCII encoding. User interaction is required according to the supplied severity vector.
What is the likely impact?
The out-of-bounds read can cause the application to crash or misinterpret converted data. The supplied vector indicates availability impact but no direct confidentiality or integrity impact.