OESA-2026-4744: qt5-qtbase security update
This package provides base tools, such as string, xml, and network handling. Security Fix(es):
Uncontrolled recursion in Qt's QDomDocument serialization (QtXml) lets deeply nested untrusted XML crash the app via stack exhaustion (DoS only).(CVE-2026-11573)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
openeuler/qt5-qtbaseto a version that resolves this vulnerability.Fixed in 5.15.10-19.oe2403sp1
Event History
Frequently Asked Questions
Which applications are exposed to this denial-of-service issue?
Applications using QtXml's QDomDocument serialization are exposed if they process deeply nested XML from untrusted sources. The impact described is an application crash through stack exhaustion.
What does an attacker need to exploit the issue?
An attacker needs to cause the application to serialize deeply nested untrusted XML. No privileges are required, but user interaction is required according to the supplied severity vector.
Does this vulnerability allow data theft or modification?
No. The provided impact information identifies availability impact only; confidentiality and integrity impacts are listed as none.