CVE-Katalog

CVE-2026-107157

qt6-base affected and fixed versions

[CVE-Katalog]

Specially crafted CBOR input passed to QCborValue::fromCbor() in Qt Core can cause an out-of-bounds read, which may crash the application and could expose information.

Schweregrad
Medium
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.15% · Oct 29, 2026

Projects and upstream resources

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Debiantrixieqt6-baseNot reportedAffectedDistribution reports no fix[CVE-2026-107157]
Debiantrixieqt6-base6.8.2+dfsg-9+deb13u2Affected[CVE-2026-107157]
Debiantrixieqtbase-opensource-srcNot reportedAffectedDistribution reports no fix[CVE-2026-107157]
Debiantrixieqtbase-opensource-src5.15.15+dfsg-6+deb13u1Affected[CVE-2026-107157]
Debiansidqt6-baseNot reportedAffectedDistribution reports no fix[CVE-2026-107157]
Debiansidqt6-base6.11.2+dfsg-7Affected[CVE-2026-107157]
Debiansidqtbase-opensource-srcNot reportedAffectedDistribution reports no fix[CVE-2026-107157]
Debiansidqtbase-opensource-src5.15.19+dfsg-6Affected[CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.12.4+dfsg-4ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.12.5+dfsg-2UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.12.5+dfsg-8UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.12.5+dfsg-8build1UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]

Showing 12 observations. All 92 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
Debianbookwormqt6-baseNot reportedAffectedDistribution reports no fix[CVE-2026-107157]
Debianbookwormqt6-base6.4.2+dfsg-10Affected[CVE-2026-107157]
Debianbookwormqtbase-opensource-srcNot reportedAffectedDistribution reports no fix[CVE-2026-107157]
Debianbookwormqtbase-opensource-src5.15.8+dfsg-11+deb12u3Affected[CVE-2026-107157]
Debianforkyqt6-baseNot reportedAffectedDistribution reports no fix[CVE-2026-107157]
Debianforkyqt6-base6.11.2+dfsg-5Affected[CVE-2026-107157]
Debianforkyqtbase-opensource-srcNot reportedAffectedDistribution reports no fix[CVE-2026-107157]
Debianforkyqtbase-opensource-src5.15.19+dfsg-5Affected[CVE-2026-107157]
Debiansidqt6-baseNot reportedAffectedDistribution reports no fix[CVE-2026-107157]
Debiansidqt6-base6.11.2+dfsg-7Affected[CVE-2026-107157]
Debiansidqtbase-opensource-srcNot reportedAffectedDistribution reports no fix[CVE-2026-107157]
Debiansidqtbase-opensource-src5.15.19+dfsg-6Affected[CVE-2026-107157]
Debiantrixieqt6-baseNot reportedAffectedDistribution reports no fix[CVE-2026-107157]
Debiantrixieqt6-base6.8.2+dfsg-9+deb13u2Affected[CVE-2026-107157]
Debiantrixieqtbase-opensource-srcNot reportedAffectedDistribution reports no fix[CVE-2026-107157]
Debiantrixieqtbase-opensource-src5.15.15+dfsg-6+deb13u1Affected[CVE-2026-107157]
Ubuntu26.04qtbase-opensource-src5.15.17+dfsg-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntu26.04qtbase-opensource-src5.15.17+dfsg-1ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntu26.04qtbase-opensource-src5.15.18+dfsg-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntu26.10qtbase-opensource-src5.15.18+dfsg-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntu26.10qtbase-opensource-src5.15.19+dfsg-2ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntu26.10qtbase-opensource-src5.15.19+dfsg-2ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.12.4+dfsg-4ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.12.5+dfsg-2UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.12.5+dfsg-8UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.12.5+dfsg-8build1UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.12.5+dfsg-9build1UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.12.8+dfsg-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.12.8+dfsg-0ubuntu2.1UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.12.8+dfsg-0ubuntu2.1+esm1UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.12.8+dfsg-0ubuntu2.1+esm2UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.12.8+dfsg-0ubuntu2.1+esm3UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.12.8+dfsg-0ubuntu2.1+esm4UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.15.10+dfsg-3UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.15.10+dfsg-5UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.15.10+dfsg-5ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.15.12+dfsg-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.15.12+dfsg-3ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.15.12+dfsg-3ubuntu6UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.15.12+dfsg-3ubuntu7UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.15.13+dfsg-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.15.13+dfsg-1ubuntu1+esm1UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.15.2+dfsg-12UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.15.2+dfsg-13UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.15.2+dfsg-14UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.15.2+dfsg-14ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.15.2+dfsg-14ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.15.2+dfsg-15UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.15.3+dfsg-1UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.15.3+dfsg-2UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.15.3+dfsg-2ubuntu0.1UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.15.3+dfsg-2ubuntu0.2UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.15.3+dfsg-2ubuntu0.2+esm1UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.15.3+dfsg-2ubuntu0.2+esm2UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.15.3+dfsg-2ubuntu0.2+esm3UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.4.2+dfsg-2ubuntu9UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.5.1+dfsg-10ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.5.1+dfsg-13ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.5.1+dfsg-13ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.5.1+dfsg-13ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.5.1+dfsg-14ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.5.1+dfsg-14ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.5.1+dfsg-14ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.5.1+dfsg-15ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.5.1+dfsg-16ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.5.1+dfsg-16ubuntu6UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.5.1+dfsg-16ubuntu7UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.5.1+dfsg-16ubuntu7.1UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.5.1+dfsg-16ubuntu7.2UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.5.1+dfsg-16ubuntu7.5UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.5.1+dfsg-16ubuntu7.6UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.5.1+dfsg-16ubuntu7.7UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.5.1+dfsg-16ubuntu7.7+esm1UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.5.1+dfsg-16ubuntu7.7+esm2UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.5.1+dfsg-6ubuntu4UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.9.1+dfsg-10ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.9.1+dfsg-10ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.9.2+dfsg-4ubuntu6UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.9.3+dfsg-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.9.3+dfsg-0ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.9.3+dfsg-0ubuntu4UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.9.4+dfsg-0ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.9.4+dfsg-0ubuntu4UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.9.5+dfsg-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.9.5+dfsg-0ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.9.5+dfsg-0ubuntu2.1UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.9.5+dfsg-0ubuntu2.3UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.9.5+dfsg-0ubuntu2.4UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.9.5+dfsg-0ubuntu2.5UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.9.5+dfsg-0ubuntu2.6UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.9.5+dfsg-0ubuntu2.6+esm1UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Ubuntuproqtbase-opensource-src5.9.5+dfsg-0ubuntu2.6+esm2UnknownSource applicability is not established[UBUNTU-CVE-2026-107157]
Original provider fields
{
  "package_releases": [
    {
      "name": "qt6-base",
      "status": "vulnerable",
      "release": "sid",
      "version": "6.11.2+dfsg-7"
    },
    {
      "name": "qt6-base",
      "status": "vulnerable",
      "release": "forky",
      "version": "6.11.2+dfsg-5"
    },
    {
      "name": "qt6-base",
      "status": "vulnerable",
      "release": "trixie",
      "version": "6.8.2+dfsg-9+deb13u2"
    },
    {
      "name": "qt6-base",
      "status": "vulnerable",
      "release": "bookworm",
      "version": "6.4.2+dfsg-10"
    },
    {
      "name": "qtbase-opensource-src",
      "status": "vulnerable",
      "release": "sid",
      "version": "5.15.19+dfsg-6"
    },
    {
      "name": "qtbase-opensource-src",
      "status": "vulnerable",
      "release": "forky",
      "version": "5.15.19+dfsg-5"
    },
    {
      "name": "qtbase-opensource-src",
      "status": "vulnerable",
      "release": "trixie",
      "version": "5.15.15+dfsg-6+deb13u1"
    },
    {
      "name": "qtbase-opensource-src",
      "status": "vulnerable",
      "release": "bookworm",
      "version": "5.15.8+dfsg-11+deb12u3"
    }
  ],
  "fixed_versions": [
    {
      "bug": null,
      "name": "qt6-base",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": ""
    },
    {
      "bug": null,
      "name": "qt6-base",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": ""
    },
    {
      "bug": null,
      "name": "qt6-base",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": ""
    },
    {
      "bug": null,
      "name": "qt6-base",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": ""
    },
    {
      "bug": null,
      "name": "qtbase-opensource-src",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": ""
    },
    {
      "bug": null,
      "name": "qtbase-opensource-src",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": ""
    },
    {
      "bug": null,
      "name": "qtbase-opensource-src",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": ""
    },
    {
      "bug": null,
      "name": "qtbase-opensource-src",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": ""
    }
  ],
  "distribution_packages": [
    {
      "name": "qtbase-opensource-src",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "5.4.2+dfsg-2ubuntu9",
        "5.5.1+dfsg-6ubuntu4",
        "5.5.1+dfsg-10ubuntu2",
        "5.5.1+dfsg-13ubuntu1",
        "5.5.1+dfsg-13ubuntu2",
        "5.5.1+dfsg-13ubuntu3",
        "5.5.1+dfsg-14ubuntu1",
        "5.5.1+dfsg-14ubuntu2",
        "5.5.1+dfsg-14ubuntu3",
        "5.5.1+dfsg-15ubuntu1",
        "5.5.1+dfsg-16ubuntu1",
        "5.5.1+dfsg-16ubuntu6",
        "5.5.1+dfsg-16ubuntu7",
        "5.5.1+dfsg-16ubuntu7.1",
        "5.5.1+dfsg-16ubuntu7.2",
        "5.5.1+dfsg-16ubuntu7.5",
        "5.5.1+dfsg-16ubuntu7.6",
        "5.5.1+dfsg-16ubuntu7.7",
        "5.5.1+dfsg-16ubuntu7.7+esm1",
        "5.5.1+dfsg-16ubuntu7.7+esm2"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-107157",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-107157",
      "provider_updated_at": "2026-10-28T20:17:41.276794444Z",
      "applicability_unknown": true
    },
    {
      "name": "qtbase-opensource-src",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "5.9.1+dfsg-10ubuntu1",
        "5.9.1+dfsg-10ubuntu2",
        "5.9.2+dfsg-4ubuntu6",
        "5.9.3+dfsg-0ubuntu1",
        "5.9.3+dfsg-0ubuntu3",
        "5.9.3+dfsg-0ubuntu4",
        "5.9.4+dfsg-0ubuntu3",
        "5.9.4+dfsg-0ubuntu4",
        "5.9.5+dfsg-0ubuntu1",
        "5.9.5+dfsg-0ubuntu2",
        "5.9.5+dfsg-0ubuntu2.1",
        "5.9.5+dfsg-0ubuntu2.3",
        "5.9.5+dfsg-0ubuntu2.4",
        "5.9.5+dfsg-0ubuntu2.5",
        "5.9.5+dfsg-0ubuntu2.6",
        "5.9.5+dfsg-0ubuntu2.6+esm1",
        "5.9.5+dfsg-0ubuntu2.6+esm2"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-107157",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-107157",
      "provider_updated_at": "2026-10-28T20:17:41.276794444Z",
      "applicability_unknown": true
    },
    {
      "name": "qtbase-opensource-src",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "5.12.4+dfsg-4ubuntu1",
        "5.12.5+dfsg-2",
        "5.12.5+dfsg-8",
        "5.12.5+dfsg-8build1",
        "5.12.5+dfsg-9build1",
        "5.12.8+dfsg-0ubuntu1",
        "5.12.8+dfsg-0ubuntu2.1",
        "5.12.8+dfsg-0ubuntu2.1+esm1",
        "5.12.8+dfsg-0ubuntu2.1+esm2",
        "5.12.8+dfsg-0ubuntu2.1+esm3",
        "5.12.8+dfsg-0ubuntu2.1+esm4"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-107157",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-107157",
      "provider_updated_at": "2026-10-28T20:17:41.276794444Z",
      "applicability_unknown": true
    },
    {
      "name": "qtbase-opensource-src",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "5.15.2+dfsg-12",
        "5.15.2+dfsg-13",
        "5.15.2+dfsg-14",
        "5.15.2+dfsg-14ubuntu1",
        "5.15.2+dfsg-14ubuntu3",
        "5.15.2+dfsg-15",
        "5.15.3+dfsg-1",
        "5.15.3+dfsg-2",
        "5.15.3+dfsg-2ubuntu0.1",
        "5.15.3+dfsg-2ubuntu0.2",
        "5.15.3+dfsg-2ubuntu0.2+esm1",
        "5.15.3+dfsg-2ubuntu0.2+esm2",
        "5.15.3+dfsg-2ubuntu0.2+esm3"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-107157",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-107157",
      "provider_updated_at": "2026-10-28T20:17:41.276794444Z",
      "applicability_unknown": true
    },
    {
      "name": "qtbase-opensource-src",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "5.15.10+dfsg-3",
        "5.15.10+dfsg-5",
        "5.15.10+dfsg-5ubuntu1",
        "5.15.12+dfsg-1ubuntu1",
        "5.15.12+dfsg-3ubuntu1",
        "5.15.12+dfsg-3ubuntu6",
        "5.15.12+dfsg-3ubuntu7",
        "5.15.13+dfsg-1ubuntu1",
        "5.15.13+dfsg-1ubuntu1+esm1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-107157",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-107157",
      "provider_updated_at": "2026-10-28T20:17:41.276794444Z",
      "applicability_unknown": true
    },
    {
      "name": "qtbase-opensource-src",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "26.10",
      "versions": [
        "5.15.18+dfsg-1ubuntu1",
        "5.15.19+dfsg-2ubuntu1",
        "5.15.19+dfsg-2ubuntu2"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-107157",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-107157",
      "provider_updated_at": "2026-10-28T20:17:41.276794444Z",
      "applicability_unknown": true
    },
    {
      "name": "qtbase-opensource-src",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "26.04",
      "versions": [
        "5.15.17+dfsg-1ubuntu1",
        "5.15.17+dfsg-1ubuntu2",
        "5.15.18+dfsg-1ubuntu1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-107157",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-107157",
      "provider_updated_at": "2026-10-28T20:17:41.276794444Z",
      "applicability_unknown": true
    }
  ]
}

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [libqt5concurrent5]Betroffen

    Quellpaket: [qtbase-opensource-src]

    Details (2)

    • 5.15.8+dfsg-11+deb12u3 · amd64 · bookworm

      Betroffen

      dsa · qtbase-opensource-src · debian · bookworm; pypi · qtbase-opensource-src · debian · 12

    • 5.15.8+dfsg-11+deb12u3 · arm64 · bookworm

      Betroffen

      dsa · qtbase-opensource-src · debian · bookworm; pypi · qtbase-opensource-src · debian · 12

  • [libqt5core5a]Betroffen

    Quellpaket: [qtbase-opensource-src]

    Details (2)

    • 5.15.8+dfsg-11+deb12u3 · amd64 · bookworm

      Betroffen

      dsa · qtbase-opensource-src · debian · bookworm; pypi · qtbase-opensource-src · debian · 12

    • 5.15.8+dfsg-11+deb12u3 · arm64 · bookworm

      Betroffen

      dsa · qtbase-opensource-src · debian · bookworm; pypi · qtbase-opensource-src · debian · 12

  • [libqt5dbus5]Betroffen

    Quellpaket: [qtbase-opensource-src]

    Details (2)

    • 5.15.8+dfsg-11+deb12u3 · amd64 · bookworm

      Betroffen

      dsa · qtbase-opensource-src · debian · bookworm; pypi · qtbase-opensource-src · debian · 12

    • 5.15.8+dfsg-11+deb12u3 · arm64 · bookworm

      Betroffen

      dsa · qtbase-opensource-src · debian · bookworm; pypi · qtbase-opensource-src · debian · 12

  • [libqt5gui5]Betroffen

    Quellpaket: [qtbase-opensource-src]

    Details (2)

    • 5.15.8+dfsg-11+deb12u3 · amd64 · bookworm

      Betroffen

      dsa · qtbase-opensource-src · debian · bookworm; pypi · qtbase-opensource-src · debian · 12

    • 5.15.8+dfsg-11+deb12u3 · arm64 · bookworm

      Betroffen

      dsa · qtbase-opensource-src · debian · bookworm; pypi · qtbase-opensource-src · debian · 12

  • [libqt5network5]Betroffen

    Quellpaket: [qtbase-opensource-src]

    Details (2)

    • 5.15.8+dfsg-11+deb12u3 · amd64 · bookworm

      Betroffen

      dsa · qtbase-opensource-src · debian · bookworm; pypi · qtbase-opensource-src · debian · 12

    • 5.15.8+dfsg-11+deb12u3 · arm64 · bookworm

      Betroffen

      dsa · qtbase-opensource-src · debian · bookworm; pypi · qtbase-opensource-src · debian · 12

  • [libqt5opengl5]Betroffen

    Quellpaket: [qtbase-opensource-src]

    Details (2)

    • 5.15.8+dfsg-11+deb12u3 · amd64 · bookworm

      Betroffen

      dsa · qtbase-opensource-src · debian · bookworm; pypi · qtbase-opensource-src · debian · 12

    • 5.15.8+dfsg-11+deb12u3 · arm64 · bookworm

      Betroffen

      dsa · qtbase-opensource-src · debian · bookworm; pypi · qtbase-opensource-src · debian · 12

  • [libqt5opengl5-dev]Betroffen

    Quellpaket: [qtbase-opensource-src]

    Details (2)

    • 5.15.8+dfsg-11+deb12u3 · amd64 · bookworm

      Betroffen

      dsa · qtbase-opensource-src · debian · bookworm; pypi · qtbase-opensource-src · debian · 12

    • 5.15.8+dfsg-11+deb12u3 · arm64 · bookworm

      Betroffen

      dsa · qtbase-opensource-src · debian · bookworm; pypi · qtbase-opensource-src · debian · 12

  • [libqt5printsupport5]Betroffen

    Quellpaket: [qtbase-opensource-src]

    Details (2)

    • 5.15.8+dfsg-11+deb12u3 · amd64 · bookworm

      Betroffen

      dsa · qtbase-opensource-src · debian · bookworm; pypi · qtbase-opensource-src · debian · 12

    • 5.15.8+dfsg-11+deb12u3 · arm64 · bookworm

      Betroffen

      dsa · qtbase-opensource-src · debian · bookworm; pypi · qtbase-opensource-src · debian · 12

  • [libqt5sql5]Betroffen

    Quellpaket: [qtbase-opensource-src]

    Details (2)

    • 5.15.8+dfsg-11+deb12u3 · amd64 · bookworm

      Betroffen

      dsa · qtbase-opensource-src · debian · bookworm; pypi · qtbase-opensource-src · debian · 12

    • 5.15.8+dfsg-11+deb12u3 · arm64 · bookworm

      Betroffen

      dsa · qtbase-opensource-src · debian · bookworm; pypi · qtbase-opensource-src · debian · 12

  • [libqt5sql5-ibase]Betroffen

    Quellpaket: [qtbase-opensource-src]

    Details (2)

    • 5.15.8+dfsg-11+deb12u3 · amd64 · bookworm

      Betroffen

      dsa · qtbase-opensource-src · debian · bookworm; pypi · qtbase-opensource-src · debian · 12

    • 5.15.8+dfsg-11+deb12u3 · arm64 · bookworm

      Betroffen

      dsa · qtbase-opensource-src · debian · bookworm; pypi · qtbase-opensource-src · debian · 12

  • [libqt5sql5-mysql]Betroffen

    Quellpaket: [qtbase-opensource-src]

    Details (2)

    • 5.15.8+dfsg-11+deb12u3 · amd64 · bookworm

      Betroffen

      dsa · qtbase-opensource-src · debian · bookworm; pypi · qtbase-opensource-src · debian · 12

    • 5.15.8+dfsg-11+deb12u3 · arm64 · bookworm

      Betroffen

      dsa · qtbase-opensource-src · debian · bookworm; pypi · qtbase-opensource-src · debian · 12

  • [libqt5sql5-odbc]Betroffen

    Quellpaket: [qtbase-opensource-src]

    Details (2)

    • 5.15.8+dfsg-11+deb12u3 · amd64 · bookworm

      Betroffen

      dsa · qtbase-opensource-src · debian · bookworm; pypi · qtbase-opensource-src · debian · 12

    • 5.15.8+dfsg-11+deb12u3 · arm64 · bookworm

      Betroffen

      dsa · qtbase-opensource-src · debian · bookworm; pypi · qtbase-opensource-src · debian · 12

  • [libqt5sql5-psql]Betroffen

    Quellpaket: [qtbase-opensource-src]

    Details (2)

    • 5.15.8+dfsg-11+deb12u3 · amd64 · bookworm

      Betroffen

      dsa · qtbase-opensource-src · debian · bookworm; pypi · qtbase-opensource-src · debian · 12

    • 5.15.8+dfsg-11+deb12u3 · arm64 · bookworm

      Betroffen

      dsa · qtbase-opensource-src · debian · bookworm; pypi · qtbase-opensource-src · debian · 12

  • [libqt5sql5-sqlite]Betroffen

    Quellpaket: [qtbase-opensource-src]

    Details (2)

    • 5.15.8+dfsg-11+deb12u3 · amd64 · bookworm

      Betroffen

      dsa · qtbase-opensource-src · debian · bookworm; pypi · qtbase-opensource-src · debian · 12

    • 5.15.8+dfsg-11+deb12u3 · arm64 · bookworm

      Betroffen

      dsa · qtbase-opensource-src · debian · bookworm; pypi · qtbase-opensource-src · debian · 12

  • [libqt5sql5-tds]Betroffen

    Quellpaket: [qtbase-opensource-src]

    Details (2)

    • 5.15.8+dfsg-11+deb12u3 · amd64 · bookworm

      Betroffen

      dsa · qtbase-opensource-src · debian · bookworm; pypi · qtbase-opensource-src · debian · 12

    • 5.15.8+dfsg-11+deb12u3 · arm64 · bookworm

      Betroffen

      dsa · qtbase-opensource-src · debian · bookworm; pypi · qtbase-opensource-src · debian · 12

  • [libqt5test5]Betroffen

    Quellpaket: [qtbase-opensource-src]

    Details (2)

    • 5.15.8+dfsg-11+deb12u3 · amd64 · bookworm

      Betroffen

      dsa · qtbase-opensource-src · debian · bookworm; pypi · qtbase-opensource-src · debian · 12

    • 5.15.8+dfsg-11+deb12u3 · arm64 · bookworm

      Betroffen

      dsa · qtbase-opensource-src · debian · bookworm; pypi · qtbase-opensource-src · debian · 12

  • [libqt5widgets5]Betroffen

    Quellpaket: [qtbase-opensource-src]

    Details (2)

    • 5.15.8+dfsg-11+deb12u3 · amd64 · bookworm

      Betroffen

      dsa · qtbase-opensource-src · debian · bookworm; pypi · qtbase-opensource-src · debian · 12

    • 5.15.8+dfsg-11+deb12u3 · arm64 · bookworm

      Betroffen

      dsa · qtbase-opensource-src · debian · bookworm; pypi · qtbase-opensource-src · debian · 12

  • [libqt5xml5]Betroffen

    Quellpaket: [qtbase-opensource-src]

    Details (2)

    • 5.15.8+dfsg-11+deb12u3 · amd64 · bookworm

      Betroffen

      dsa · qtbase-opensource-src · debian · bookworm; pypi · qtbase-opensource-src · debian · 12

    • 5.15.8+dfsg-11+deb12u3 · arm64 · bookworm

      Betroffen

      dsa · qtbase-opensource-src · debian · bookworm; pypi · qtbase-opensource-src · debian · 12

  • [libqt6concurrent6]Betroffen

    Quellpaket: [qt6-base]

    Details (2)

    • 6.4.2+dfsg-10 · amd64 · bookworm

      Betroffen

      dsa · qt6-base · debian · bookworm; pypi · qt6-base · debian · 12

    • 6.4.2+dfsg-10 · arm64 · bookworm

      Betroffen

      dsa · qt6-base · debian · bookworm; pypi · qt6-base · debian · 12

  • [libqt6core6]Betroffen

    Quellpaket: [qt6-base]

    Details (2)

    • 6.4.2+dfsg-10 · amd64 · bookworm

      Betroffen

      dsa · qt6-base · debian · bookworm; pypi · qt6-base · debian · 12

    • 6.4.2+dfsg-10 · arm64 · bookworm

      Betroffen

      dsa · qt6-base · debian · bookworm; pypi · qt6-base · debian · 12

Weitere Ergebnisse

Beobachtet:

Referenzen

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]