Live › vulnerability › CVE-2026-107457
Under certain MQTT 5 connection settings, the Qt MQTT module's QMqttClient class can corrupt memory. The likely result is that the application using it crashes.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-02 09:22 UTC. All times on this page are UTC.
Applications built with the Qt MQTT module that use MQTT 5 connections under certain settings. The sources do not name the exact settings or affected Qt versions. Teams not using Qt MQTT with MQTT 5 are likely unaffected.
No product ranges from the sources yet.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A memory corruption vulnerability in the QMqttClient class of the Qt MQTT module. Under certain MQTT 5 connection settings between client and server, QMqttClient may corrupt memory, which can cause the application to crash.
This page as .md · .json · in your agent: get_signal("CVE-2026-107457")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.