OESA-2026-4785: qt6-qt5compat security update
. Security Fix(es):
An out-of-bounds write vulnerability in the Qt QTextCodec iconv-based encoding of the Qt 5 Compatibility APIs module (Qt Core in Qt 5 and earlier) impacts Qt. Under certain conditions, encoding text with QTextCodec may write outside an internal buffer. This can cause the application to crash and may affect data integrity.(CVE-2026-107590)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
openeuler/qt6-qt5compatto a version that resolves this vulnerability.Fixed in 6.5.2-4.oe2403sp3
Event History
Frequently Asked Questions
Which applications are exposed to this issue?
Applications using the Qt 5 Compatibility APIs module and encoding text through the iconv-based QTextCodec path may be exposed. The issue occurs under certain conditions during text encoding.
What could exploitation cause?
The out-of-bounds write can cause an affected application to crash and may affect data integrity.
Does exploiting this require an attacker to already have access to the system?
The supplied vector indicates local attack access and no privileges required, with user interaction required. The advisory does not provide further details about the required interaction or triggering input.