CVE catalog

CVE-2026-9499

Severity: High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published: Jul 18, 2026, 5:31:59 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.30% · Oct 25, 2026

An out-of-bounds read (buffer over-read) vulnerability exists in QTextCodec::codecForName() in Qt. When the function is called with a QByteArray that is not NUL-terminated (for example, one created with QByteArray::fromRawData()), the codec-name matching routine reads past the end of the supplied buffer. In most cases this results in an incorrect text codec being selected; in the worst case, if the over-read reaches unmapped memory, the process crashes (denial of service). The over-read is bounded by the length of the longest codec-name candidate, and the out-of-bounds bytes are only compared internally against Qt's fixed list of codec names, so no data is disclosed to an attacker. Applications that do not pass non-NUL-terminated QByteArrays to QTextCodec::codecForName() are not exposed. The affected code resides in the Qt5Compat module from Qt 6.0.0 onward, and in Qt Core (qtbase) in Qt 4.x and Qt 5.x.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	qt6-5compat	sid	`6.11.2-2`	fixed
Debian	qt6-5compat	forky	`6.11.2-2`	fixed
Debian	qt6-5compat	trixie	`6.8.2-3`	vulnerable
Debian	qt6-5compat	bookworm	`6.4.2-1`	vulnerable
Debian	qtbase-opensource-src	sid	`5.15.19+dfsg-6`	fixed
Debian	qtbase-opensource-src	forky	`5.15.19+dfsg-5`	fixed
Debian	qtbase-opensource-src	trixie	`5.15.15+dfsg-6+deb13u1`	vulnerable
Debian	qtbase-opensource-src	bookworm	`5.15.8+dfsg-11+deb12u3`	vulnerable
Cpe	qt6-5compat	Not reported	Not reported	vulnerable
Cpe	qtbase-opensource-src	Not reported	Not reported	vulnerable

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	qt6-5compat	source	sid	`6.10.2-4`	not yet assigned	Not reported	[1142690]
Debian	qt6-5compat	source	forky	`6.10.2-4`	not yet assigned	Not reported	[1142690]
Debian	qt6-5compat	source	trixie	`(unfixed)`	not yet assigned	Not reported	[1142690]
Debian	qt6-5compat	source	bookworm	`(unfixed)`	not yet assigned	Not reported	[1142690]
Debian	qtbase-opensource-src	source	sid	`5.15.19+dfsg-4`	not yet assigned	Not reported	[1142691]
Debian	qtbase-opensource-src	source	forky	`5.15.19+dfsg-4`	not yet assigned	Not reported	[1142691]
Debian	qtbase-opensource-src	source	trixie	`(unfixed)`	not yet assigned	Not reported	[1142691]
Debian	qtbase-opensource-src	source	bookworm	`(unfixed)`	not yet assigned	Not reported	[1142691]

[Debian bug #1142690][Debian bug #1142691]

Notes

[trixie] qt6-5compat: Minor issue [bookworm] qt6-5compat: Minor issue [trixie] qtbase-opensource-src: Minor issue [bookworm] qtbase-opensource-src: Minor issue

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[libqt5concurrent5]Affected
Source package: [qtbase-opensource-src]
Details (2)
- 5.15.8+dfsg-11+deb12u3 · amd64 · bookworm
  Affected
  nvd · qtbase-opensource-src · debian · bookworm; nvd · qtbase-opensource-src · debian · 12
- 5.15.8+dfsg-11+deb12u3 · arm64 · bookworm
  Affected
  nvd · qtbase-opensource-src · debian · bookworm; nvd · qtbase-opensource-src · debian · 12
[libqt5core5a]Affected
Source package: [qtbase-opensource-src]
Details (2)
- 5.15.8+dfsg-11+deb12u3 · amd64 · bookworm
  Affected
  nvd · qtbase-opensource-src · debian · bookworm; nvd · qtbase-opensource-src · debian · 12
- 5.15.8+dfsg-11+deb12u3 · arm64 · bookworm
  Affected
  nvd · qtbase-opensource-src · debian · bookworm; nvd · qtbase-opensource-src · debian · 12
[libqt5dbus5]Affected
Source package: [qtbase-opensource-src]
Details (2)
- 5.15.8+dfsg-11+deb12u3 · amd64 · bookworm
  Affected
  nvd · qtbase-opensource-src · debian · bookworm; nvd · qtbase-opensource-src · debian · 12
- 5.15.8+dfsg-11+deb12u3 · arm64 · bookworm
  Affected
  nvd · qtbase-opensource-src · debian · bookworm; nvd · qtbase-opensource-src · debian · 12
[libqt5gui5]Affected
Source package: [qtbase-opensource-src]
Details (2)
- 5.15.8+dfsg-11+deb12u3 · amd64 · bookworm
  Affected
  nvd · qtbase-opensource-src · debian · bookworm; nvd · qtbase-opensource-src · debian · 12
- 5.15.8+dfsg-11+deb12u3 · arm64 · bookworm
  Affected
  nvd · qtbase-opensource-src · debian · bookworm; nvd · qtbase-opensource-src · debian · 12
[libqt5network5]Affected
Source package: [qtbase-opensource-src]
Details (2)
- 5.15.8+dfsg-11+deb12u3 · amd64 · bookworm
  Affected
  nvd · qtbase-opensource-src · debian · bookworm; nvd · qtbase-opensource-src · debian · 12
- 5.15.8+dfsg-11+deb12u3 · arm64 · bookworm
  Affected
  nvd · qtbase-opensource-src · debian · bookworm; nvd · qtbase-opensource-src · debian · 12
[libqt5opengl5]Affected
Source package: [qtbase-opensource-src]
Details (2)
- 5.15.8+dfsg-11+deb12u3 · amd64 · bookworm
  Affected
  nvd · qtbase-opensource-src · debian · bookworm; nvd · qtbase-opensource-src · debian · 12
- 5.15.8+dfsg-11+deb12u3 · arm64 · bookworm
  Affected
  nvd · qtbase-opensource-src · debian · bookworm; nvd · qtbase-opensource-src · debian · 12
[libqt5opengl5-dev]Affected
Source package: [qtbase-opensource-src]
Details (2)
- 5.15.8+dfsg-11+deb12u3 · amd64 · bookworm
  Affected
  nvd · qtbase-opensource-src · debian · bookworm; nvd · qtbase-opensource-src · debian · 12
- 5.15.8+dfsg-11+deb12u3 · arm64 · bookworm
  Affected
  nvd · qtbase-opensource-src · debian · bookworm; nvd · qtbase-opensource-src · debian · 12
[libqt5printsupport5]Affected
Source package: [qtbase-opensource-src]
Details (2)
- 5.15.8+dfsg-11+deb12u3 · amd64 · bookworm
  Affected
  nvd · qtbase-opensource-src · debian · bookworm; nvd · qtbase-opensource-src · debian · 12
- 5.15.8+dfsg-11+deb12u3 · arm64 · bookworm
  Affected
  nvd · qtbase-opensource-src · debian · bookworm; nvd · qtbase-opensource-src · debian · 12
[libqt5sql5]Affected
Source package: [qtbase-opensource-src]
Details (2)
- 5.15.8+dfsg-11+deb12u3 · amd64 · bookworm
  Affected
  nvd · qtbase-opensource-src · debian · bookworm; nvd · qtbase-opensource-src · debian · 12
- 5.15.8+dfsg-11+deb12u3 · arm64 · bookworm
  Affected
  nvd · qtbase-opensource-src · debian · bookworm; nvd · qtbase-opensource-src · debian · 12
[libqt5sql5-ibase]Affected
Source package: [qtbase-opensource-src]
Details (2)
- 5.15.8+dfsg-11+deb12u3 · amd64 · bookworm
  Affected
  nvd · qtbase-opensource-src · debian · bookworm; nvd · qtbase-opensource-src · debian · 12
- 5.15.8+dfsg-11+deb12u3 · arm64 · bookworm
  Affected
  nvd · qtbase-opensource-src · debian · bookworm; nvd · qtbase-opensource-src · debian · 12
[libqt5sql5-mysql]Affected
Source package: [qtbase-opensource-src]
Details (2)
- 5.15.8+dfsg-11+deb12u3 · amd64 · bookworm
  Affected
  nvd · qtbase-opensource-src · debian · bookworm; nvd · qtbase-opensource-src · debian · 12
- 5.15.8+dfsg-11+deb12u3 · arm64 · bookworm
  Affected
  nvd · qtbase-opensource-src · debian · bookworm; nvd · qtbase-opensource-src · debian · 12
[libqt5sql5-odbc]Affected
Source package: [qtbase-opensource-src]
Details (2)
- 5.15.8+dfsg-11+deb12u3 · amd64 · bookworm
  Affected
  nvd · qtbase-opensource-src · debian · bookworm; nvd · qtbase-opensource-src · debian · 12
- 5.15.8+dfsg-11+deb12u3 · arm64 · bookworm
  Affected
  nvd · qtbase-opensource-src · debian · bookworm; nvd · qtbase-opensource-src · debian · 12
[libqt5sql5-psql]Affected
Source package: [qtbase-opensource-src]
Details (2)
- 5.15.8+dfsg-11+deb12u3 · amd64 · bookworm
  Affected
  nvd · qtbase-opensource-src · debian · bookworm; nvd · qtbase-opensource-src · debian · 12
- 5.15.8+dfsg-11+deb12u3 · arm64 · bookworm
  Affected
  nvd · qtbase-opensource-src · debian · bookworm; nvd · qtbase-opensource-src · debian · 12
[libqt5sql5-sqlite]Affected
Source package: [qtbase-opensource-src]
Details (2)
- 5.15.8+dfsg-11+deb12u3 · amd64 · bookworm
  Affected
  nvd · qtbase-opensource-src · debian · bookworm; nvd · qtbase-opensource-src · debian · 12
- 5.15.8+dfsg-11+deb12u3 · arm64 · bookworm
  Affected
  nvd · qtbase-opensource-src · debian · bookworm; nvd · qtbase-opensource-src · debian · 12
[libqt5sql5-tds]Affected
Source package: [qtbase-opensource-src]
Details (2)
- 5.15.8+dfsg-11+deb12u3 · amd64 · bookworm
  Affected
  nvd · qtbase-opensource-src · debian · bookworm; nvd · qtbase-opensource-src · debian · 12
- 5.15.8+dfsg-11+deb12u3 · arm64 · bookworm
  Affected
  nvd · qtbase-opensource-src · debian · bookworm; nvd · qtbase-opensource-src · debian · 12
[libqt5test5]Affected
Source package: [qtbase-opensource-src]
Details (2)
- 5.15.8+dfsg-11+deb12u3 · amd64 · bookworm
  Affected
  nvd · qtbase-opensource-src · debian · bookworm; nvd · qtbase-opensource-src · debian · 12
- 5.15.8+dfsg-11+deb12u3 · arm64 · bookworm
  Affected
  nvd · qtbase-opensource-src · debian · bookworm; nvd · qtbase-opensource-src · debian · 12
[libqt5widgets5]Affected
Source package: [qtbase-opensource-src]
Details (2)
- 5.15.8+dfsg-11+deb12u3 · amd64 · bookworm
  Affected
  nvd · qtbase-opensource-src · debian · bookworm; nvd · qtbase-opensource-src · debian · 12
- 5.15.8+dfsg-11+deb12u3 · arm64 · bookworm
  Affected
  nvd · qtbase-opensource-src · debian · bookworm; nvd · qtbase-opensource-src · debian · 12
[libqt5xml5]Affected
Source package: [qtbase-opensource-src]
Details (2)
- 5.15.8+dfsg-11+deb12u3 · amd64 · bookworm
  Affected
  nvd · qtbase-opensource-src · debian · bookworm; nvd · qtbase-opensource-src · debian · 12
- 5.15.8+dfsg-11+deb12u3 · arm64 · bookworm
  Affected
  nvd · qtbase-opensource-src · debian · bookworm; nvd · qtbase-opensource-src · debian · 12
[libqt6core5compat6]Affected
Source package: [qt6-5compat]
Details (2)
- 6.4.2-1 · amd64 · bookworm
  Affected
  nvd · qt6-5compat · debian · bookworm; nvd · qt6-5compat · debian · 12
- 6.4.2-1 · arm64 · bookworm
  Affected
  nvd · qt6-5compat · debian · bookworm; nvd · qt6-5compat · debian · 12
[qml6-module-qt5compat-graphicaleffects]Affected
Source package: [qt6-5compat]
Details (2)
- 6.4.2-1 · amd64 · bookworm
  Affected
  nvd · qt6-5compat · debian · bookworm; nvd · qt6-5compat · debian · 12
- 6.4.2-1 · arm64 · bookworm
  Affected
  nvd · qt6-5compat · debian · bookworm; nvd · qt6-5compat · debian · 12

Next results

Observed: Oct 23, 2026, 9:44:07 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]