UBUNTU-CVE-2026-107157: Low severity ubuntu/qtbase-opensource-src vulnerability

Published Oct 26, 2026

Updated

Specially crafted CBOR input passed to QCborValue::fromCbor() in Qt Core can cause an out-of-bounds read, which may crash the application and could expose information.

Affected Software

7 affected components

ubuntu/qtbase-opensource-src*

Event History

Oct 26, 2026

CVE Published

via OSV·02:16 PM

Data Sourced

via OSV·02:16 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What conditions are required to exploit this issue?

An attacker must be able to supply specially crafted CBOR data that the application passes to QCborValue::fromCbor(). The listed vector also indicates local access, high attack complexity, and user interaction are required.

What is the likely impact on an affected application?

Processing the crafted CBOR input can trigger an out-of-bounds read. This may crash the application and could expose information.

UBUNTU-CVE-2026-107157: Low severity ubuntu/qtbase-opensource-src vulnerability

Affected Software

Event History

Frequently Asked Questions

What conditions are required to exploit this issue?

What is the likely impact on an affected application?

Company

Resources

Contact

Frequently Asked Questions

What conditions are required to exploit this issue?

What is the likely impact on an affected application?