Skip to content
CVE-2026-100140 - Exploits & Severity

CVE-2026-100140 - Exploits & Severity

Feedly • November 2, 2026

An integer overflow vulnerability in the Qt XML parsing (Qt5Compat / QXmlSimpleReader) functionality of Qt. This affects Qt versions 6.0.0 through 6.8.9, 6.9.0 through 6.11.2, and 6.12.0.

An unauthenticated attacker who can provide malicious XML input to an application using the affected Qt XML parsing library can trigger an integer overflow that causes memory corruption or application crash.

There is no evidence that a public proof-of-concept exists. There is no evidence of proof of exploitation at the moment.

Patches are available. Refer to the GitHub Advisory (GHSA-7695-pqx4-vc24) for patch details and updated versions.

Update Qt to a patched version. Implement input validation and sanitization for XML data from untrusted sources. Consider using alternative XML parsing libraries if immediate patching is not feasible. Restrict access to XML parsing functionality where possible.

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:U/V:X/RE:X/U:Green

Feedly found the first article mentioning CVE-2026-100140 . See article

NVD published the first details for CVE-2026-100140

A CVSS base score of 1.9 has been assigned.

GitHub Advisories released a security advisory .

RedHat CVE advisory released a security advisory ( CVE-2026-100140 ) .

Security advisory: CVE-2026-100140: Integer overflow vulnerability in XML parsing functionality of Qt5Compat impacts Qt

Security advisory: CVE-2026-100140: Integer overflow vulnerability in XML parsing functionality of Qt5Compat impacts Qt

CVE-2026-100140 - Exploits & Severity - Feedly

10 changes (0 new | 10 updated):

CVE-2026-100140: Integer overflow vulnerability in XML parsing functionality of Qt5Compat impacts Qt [LOW] CVSS 1.9

An integer overflow vulnerability in the Qt XML parsing (Qt5Compat / QXmlSimpleReader) functionality… (CVE-2026-100140)

Be the first to know critical vulnerabilities

Collect, analyze, and vulnerability reports faster using AI

Extracted Entities