Live › vulnerability › CVE-2026-107472
Go to dashboardThe Qt 5 Compatibility APIs module has an out-of-bounds read in its QTextCodec TSCII encoder. Applications that convert text to TSCII through QTextCodec may read memory past the input buffer, which can crash them or misread the data.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 08:31 UTC. All times on this page are UTC.
Applications built on Qt 5 that use the QTextCodec TSCII encoding to convert text, most often when handling user-supplied text in Tamil-language encodings. Applications that do not use TSCII conversion, or that run only on Qt 6, are not affected by this description.
No product ranges from the sources yet.
TSCII or QTextCodec::codecForName.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An out-of-bounds read vulnerability in the QTextCodec TSCII encoding of the Qt 5 Compatibility APIs module (Qt Core in Qt 5 and earlier) impacts Qt. Applications that convert text to the TSCII encoding through QTextCodec may read memory outside the input buffer, which can cause the application to crash or misinterpret the data.
This page as .md · .json · in your agent: get_signal("CVE-2026-107472")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.