UBUNTU-CVE-2026-107472: Medium severity ubuntu/qt6-5compat vulnerability
An out-of-bounds read vulnerability in the QTextCodec TSCII encoding of the Qt 5 Compatibility APIs module (Qt Core in Qt 5 and earlier) impacts Qt. Applications that convert text to the TSCII encoding through QTextCodec may read memory outside the input buffer, which can cause the application to crash or misinterpret the data.
Affected Software
Event History
Frequently Asked Questions
Which applications are exposed to this issue?
Applications using the Qt 5 Compatibility APIs module are affected when they convert text to the TSCII encoding through QTextCodec. The reported impact is an out-of-bounds read that may crash the application or cause it to misinterpret data.
What does exploitation require?
The vulnerable application must process text through QTextCodec's TSCII encoding conversion path. The supplied metrics indicate local attack vector, low attack complexity, no privileges required, and user interaction is required.
Is this a confidentiality or integrity issue?
The provided severity vector reports no confidentiality or integrity impact, but high availability impact. In practice, the described consequence is primarily an application crash, with possible data misinterpretation.