Qt Group Japan@qtgroupjp
セキュリティ勧告: CVE-2026-100140 Qt5CompatのXML解析機能における整数オーバーフローの脆弱性 https://www.qt.io/ja-jp/blog/security-advisory-cve-2026-100140
01021184
5.2K followersView on X
CVE-2026-100140
LOWCVSS 1.9 · LOWSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
An integer overflow vulnerability in the Qt XML parsing (Qt5Compat / QXmlSimpleReader) functionality of Qt.
0.0/ 10 priority
Sources & remediation
Other references
- https://codereview.qt-project.org/c/qt/qt5compat/+/764751
- https://codereview.qt-project.org/c/qt/qt5compat/+/768900
- https://codereview.qt-project.org/c/qt/qt5compat/+/768901
- https://codereview.qt-project.org/c/qt/qt5compat/+/768902
- https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-100140:
Weakness type (CWE)
CWE-190
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Threat summary
- 1 mentions across 1 observed day
What's happening
- 1 total mentions across 1 day