{"id":"CVE-2026-107157","kind":"vulnerability","aliases":["CVE-2026-107157"],"related":[],"title":"Qt Framework: CBOR parser reads past buffer bounds in fromCbor()","description":"Out-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt Framework.","summary":"QCborValue::fromCbor() in the Qt Framework can read memory beyond the end of its input buffer when parsing CBOR data. An attacker who can supply CBOR input to an affected Qt application could leak nearby memory contents.","severity":"low","cvss":2.0,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["c++","desktop","package","qt"],"not_affected_if":[],"how_to_check":"- unknown","fix":"- unknown","status":"open","published_at":"2026-10-26T14:16:23+00:00","first_seen_at":"2026-10-26T14:30:36+00:00","triaged_at":"2026-10-26T14:32:53+00:00","updated_at":"2026-10-26T14:32:53+00:00","category":"package","confidence":0.4,"triage":{"at":"2026-10-26T14:32:53Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"unknown","title":"Qt Framework: CBOR parser reads past buffer bounds in fromCbor()","impact":"low","summary":"QCborValue::fromCbor() in the Qt Framework can read memory beyond the end of its input buffer when parsing CBOR data. An attacker who can supply CBOR input to an affected Qt application could leak nearby memory contents.","category":"package","nicknames":[],"who_cares":["qt","c++","desktop"],"confidence":0.4,"needs_auth":"unknown","worst_case":"Out-of-bounds memory read; contents may leak to attacker","analyst_note":"Check the NVD entry and the Qt project advisory for affected Qt versions, fixed versions and whether untrusted CBOR input reaches fromCbor().","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000506,"input_tokens":3252,"output_tokens":362,"severity_before":"low"},"analyst_status":null,"analyst_note":null,"search":"'-107157':13A,16A '-2026':12A,15A 'affect':50B 'applic':52B 'attack':42B 'beyond':30B 'bound':8A,61C 'buffer':7A,36B 'c':17B 'cbor':3A,39B,46B 'content':57B 'could':53B 'cve':11A,14A 'data':40B 'desktop':18B 'end':32B 'framework':2A,26B,69C 'fromcbor':10A,22B,66C 'impact':67C 'input':35B,47B 'leak':54B 'memori':29B,56B 'nearbi':55B 'out-of-bound':58C 'packag':19B 'pars':38B 'parser':4A 'past':6A 'qcborvalu':21B,65C 'qt':1A,20B,25B,51B,68C 'read':5A,28B,62C 'suppli':45B 'vulner':63C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T14:16:23+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:L/U:Amber","cvss_by":"a59d8014-47c4-4630-ab43-e1b13cbe58e3","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-107157","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107157","severity":null,"published_at":"2026-10-26T14:16:23+00:00","modified_at":"2026-10-26T14:16:23+00:00","first_seen_at":"2026-10-26T14:30:36+00:00","fetched_at":"2026-10-26T14:30:36+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}