Ghostwire
Home / Vulnerabilities / CVE-2026-107157

CVE-2026-107157: Specially crafted CBOR input passed to QCborValue::fromCbor() in Qt Core can cause an out-of-bounds read, which may...

MEDIUM CVSS 0.0 Exploit Available

Published: October 26, 2026 | Last Modified: October 27, 2026

Description

Specially crafted CBOR input passed to QCborValue::fromCbor() in Qt Core can cause an out-of-bounds read, which may crash the application and could expose information.

Ghostwire Analysis — What This Means Practically

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

References