OESA-2026-4746: qt5-qtbase security update
This package provides base tools, such as string, xml, and network handling. Security Fix(es):
Uncontrolled recursion in Qt's QDomDocument serialization (QtXml) lets deeply nested untrusted XML crash the app via stack exhaustion (DoS only).(CVE-2026-11573)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
openeuler/qt5-qtbaseto a version that resolves this vulnerability.Fixed in 5.15.10-19.oe2403sp4
Event History
Frequently Asked Questions
Which applications are exposed to this issue?
Applications using QtXml's QDomDocument serialization are exposed if they process deeply nested XML from an untrusted source. The reported impact is denial of service through stack exhaustion.
What must an attacker do to trigger the vulnerability?
An attacker needs to supply deeply nested untrusted XML that is serialized through QDomDocument. No additional exploitation requirements are provided.
What is the impact if exploitation succeeds?
The affected application can crash because uncontrolled recursion exhausts the stack. The advisory describes this as a denial-of-service-only issue.