Live › vulnerability › CVE-2026-107590
Go to dashboardIn the Qt 5 Compatibility APIs module, QTextCodec's iconv-based encoding can write past an internal buffer under certain conditions. The sources say this can crash the application and may affect data integrity.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 13:31 UTC. All times on this page are UTC.
Applications built on Qt 5 and earlier that encode text through QTextCodec with the iconv-based codec. The sources do not say which configurations or platforms trigger the condition. Teams on Qt 6 or on Qt 5 builds without this codec path can likely skip it, but the sources do not confirm this.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An out-of-bounds write vulnerability in the Qt QTextCodec iconv-based encoding of the Qt 5 Compatibility APIs module (Qt Core in Qt 5 and earlier) impacts Qt. Under certain conditions, encoding text with QTextCodec may write outside an internal buffer. This can cause the application to crash and may affect data integrity.
This page as .md · .json · in your agent: get_signal("CVE-2026-107590")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.