Live › vulnerability › CVE-2026-100140
Qt's XML parsing code in the Qt5Compat module (QXmlSimpleReader) has an integer overflow. The sources do not say what an attacker can get beyond a low CVSS score of 1.9.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-02 12:23 UTC. All times on this page are UTC.
Applications built with Qt that parse XML through the Qt5Compat QXmlSimpleReader class. The sources do not say which Qt versions or configurations are affected, or what triggers the overflow.
No product ranges from the sources yet.
Unknown from the sources.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An integer overflow vulnerability in the Qt XML parsing (Qt5Compat / QXmlSimpleReader) functionality of Qt.
This page as .md · .json · in your agent: get_signal("CVE-2026-100140")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.