{"id":"CVE-2026-96432","kind":"vulnerability","aliases":["CVE-2026-96432"],"related":[],"title":"Qt Network: malicious HTTP/2 server can crash apps via null pointer","description":"A malicious or compromised HTTP/2 server withholding SETTINGS ACK can send RST_STREAM on a completed stream, planting a null pointer, and then send a PUSH_PROMISE for that stream, causing a null pointer dereference in the QNetworkAccessManager class of the Qt Network module that crashes the application.","summary":"A malicious or compromised HTTP/2 server that withholds SETTINGS ACK can send RST_STREAM on a completed stream and then a PUSH_PROMISE for it. This triggers a null pointer dereference in QNetworkAccessManager that crashes the application.","severity":"low","cvss":2.1,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["c++","desktop-apps","package","qt"],"not_affected_if":["no-http2-traffic","trusted-servers-only"],"how_to_check":"- unknown","fix":"- unknown","status":"open","published_at":"2026-10-26T12:17:08+00:00","first_seen_at":"2026-10-26T12:29:53+00:00","triaged_at":"2026-10-26T12:31:48+00:00","updated_at":"2026-10-26T12:31:48+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-10-26T12:31:48Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"internet","title":"Qt Network: malicious HTTP/2 server can crash apps via null pointer","impact":"low","summary":"A malicious or compromised HTTP/2 server that withholds SETTINGS ACK can send RST_STREAM on a completed stream and then a PUSH_PROMISE for it. This triggers a null pointer dereference in QNetworkAccessManager that crashes the application.","category":"package","nicknames":[],"who_cares":["qt","c++","desktop-apps"],"confidence":0.6,"needs_auth":"no","worst_case":"Application crashes from a null pointer dereference","analyst_note":"Check the Qt advisory and NVD entry for affected and fixed Qt versions, which the sources do not give.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":["no-http2-traffic","trusted-servers-only"],"who_is_affected":"Applications built on the Qt Network module that make HTTP/2 requests through QNetworkAccessManager and connect to servers they do not fully trust. Applications that only talk to trusted HTTP/2 endpoints face much less risk. The sources do not name affected Qt versions.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000559,"input_tokens":3333,"output_tokens":452,"severity_before":"low"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-96432':14A,17A 'ack':33B,69C 'app':8A,21B 'applic':60B,108C 'c':18B 'caus':91C 'class':99C 'complet':40B,76C 'compromis':27B,64C 'crash':7A,58B,106C 'cve':12A,15A 'derefer':54B,95C 'desktop':20B 'desktop-app':19B 'http/2':4A,28B,65C 'malici':3A,25B,62C 'modul':104C 'network':2A,103C 'null':10A,52B,80C,93C 'packag':22B 'plant':78C 'pointer':11A,53B,81C,94C 'promis':46B,87C 'push':45B,86C 'qnetworkaccessmanag':56B,98C 'qt':1A,23B,102C 'rst':36B,72C 'send':35B,71C,84C 'server':5A,29B,66C 'set':32B,68C 'stream':37B,41B,73C,77C,90C 'trigger':50B 'via':9A 'withhold':31B,67C","nicknames":[],"mitigations":[],"who_affected":"Applications built on the Qt Network module that make HTTP/2 requests through QNetworkAccessManager and connect to servers they do not fully trust. Applications that only talk to trusted HTTP/2 endpoints face much less risk. The sources do not name affected Qt versions.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T12:17:08+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:X/RE:L/U:Green","cvss_by":"a59d8014-47c4-4630-ab43-e1b13cbe58e3","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-96432","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96432","severity":null,"published_at":"2026-10-26T12:17:08+00:00","modified_at":"2026-10-26T12:17:08+00:00","first_seen_at":"2026-10-26T12:29:53+00:00","fetched_at":"2026-10-26T12:29:53+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}