UBUNTU-CVE-2026-100140: Integer Overflow
Published Nov 3, 2026
·Updated
An integer overflow vulnerability in the Qt XML parsing (Qt5Compat / QXmlSimpleReader) functionality of Qt.
Affected Software
4 affected components
ubuntu/qt6-5compat*
ubuntu/qt6-5compat*
ubuntu/qt6-5compat*
ubuntu/qt6-5compat*
Event History
Nov 3, 2026
CVE Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
The supplied vector indicates that exploitation requires local access and user interaction. No privileges are required.
2
What is the likely security impact?
The provided severity vector indicates high impact to availability and low impact to integrity. It indicates no impact to confidentiality.
3
Which Ubuntu deployments are relevant?
This applies to Ubuntu installations using the qt6-5compat package, specifically where Qt XML parsing uses Qt5Compat or QXmlSimpleReader functionality.