Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-95509

Out-of-bounds read vulnerability in string formatting impacts Qt for MCUs

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Qt

Description

Strings optimized for Latin-1 displaying Latin-1 characters cause incorrect String.arg() formatting by an incorrect buffer size calculation, causing out-of-bounds reading.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

qt Qt for MCUs

Default version status: unaffected

  • 2.6.0 to < 2.11.3affected
  • 2.12.0 to < 2.12.3affected

References