Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-10-20T08:20:38 qt5-qtbase: qt6-qt5compat: qt: Denial of Service via out-of-bounds read in QBinaryJson 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CWE-125

A malformed header in the binary file fed to QBinaryJson::fromBinaryData() can cause undefined behaviour because of out-of-bounds read.

A flaw was found in Qt. An out-of-bounds read vulnerability can occur when parsing a binary file with a malformed header in the QBinaryJson::fromBinaryData() function. An attacker could exploit this flaw by convincing a user or application to process a specially crafted binary file, causing the application to crash and resulting in a Denial of Service (DoS).

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Red Hat Enterprise Linux 10 Fix deferred qt6-qt5compat Red Hat Enterprise Linux 7 Fix deferred qt5-qtbase Red Hat Enterprise Linux 8 Fix deferred qt5-qtbase Red Hat Enterprise Linux 9 Fix deferred qt5-qtbase Red Hat Hardened Images Affected qt5-qtbase Red Hat Hardened Images Not affected qt6 https://www.cve.org/CVERecord?id=CVE-2026-101201 https://nvd.nist.gov/vuln/detail/CVE-2026-101201 https://codereview.qt-project.org/c/qt/qt5compat/+/758925 https://codereview.qt-project.org/c/qt/qt5compat/+/759230 https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-101201