CVE-2026-16762

LOWCVSS 8.7 Β· HIGH

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

An attacker able to supply a crafted XML document to an application using QXmlStreamReader can cause disproportionate CPU consumption during parsing, making the application unresponsive (denial of service). Exploitation requires only that the application parse attacker-influenced XML; no authentication, privileges, or user interaction beyond ingesting the input are needed. There is no loss of confidentiality or integrity β€” no data disclosure, data modification, or code execution β€” and the impact is contained to the affected process.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-407

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Deep dive

Full discourse1 post
  • Sweden Cpp@SwedenCpp

    πŸ‡ΈπŸ‡ͺ http://SwedenCpp.se #Cpp daily: (24h + upcoming) πŸŽ₯ 4 videos πŸ“ 3 blogs πŸš€ 3 releases πŸŽ™οΈ 1 podcast Random πŸ“ pick: Security advisory: CVE-2026-16762 Denial-of-service vulnerability in the Qt Core QXmlStream parser (QXmlStreamReader) impacts Qt Visit our homepage for more info

    0000046
    982 followersView on X

Explore more