Oracle Linux 10 qt6-qt5compat Important Out-of-Bounds Read CVE-2026

Back Linuxsecurity

Oracle Linux 10 qt6-qt5compat Important Out-of-Bounds Read CVE-2026

Linuxsecurity •LinuxSecurity Advisories • September 10, 2026

Share: View original

Keep your Linux systems secure and up to date with practical patching guidance. Review Linux Patching Best Practices ×

[6.10.1-1.1] - Fix out-of-bounds read in QTextCodec::codecForName() (CVE-2026-9499) Resolves: RHEL-247204

[6.10.1-1.1] - Fix out-of-bounds read in QTextCodec::codecForName() (CVE-2026-9499) Resolves: RHEL-247204

qt6-qt5compat-6.10.1-1.el10_2.1.x86_64.rpm qt6-qt5compat-devel-6.10.1-1.el10_2.1.x86_64.rpm qt6-qt5compat-examples-6.10.1-1.el10_2.1.x86_64.rpm

qt6-qt5compat-6.10.1-1.el10_2.1.x86_64.rpm qt6-qt5compat-devel-6.10.1-1.el10_2.1.x86_64.rpm qt6-qt5compat-examples-6.10.1-1.el10_2.1.x86_64.rpm

qt6-qt5compat-6.10.1-1.el10_2.1.aarch64.rpm qt6-qt5compat-devel-6.10.1-1.el10_2.1.aarch64.rpm qt6-qt5compat-examples-6.10.1-1.el10_2.1.aarch64.rpm

qt6-qt5compat-6.10.1-1.el10_2.1.aarch64.rpm qt6-qt5compat-devel-6.10.1-1.el10_2.1.aarch64.rpm qt6-qt5compat-examples-6.10.1-1.el10_2.1.aarch64.rpm

Related CVEs: CVE-2026-9499

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Out-of-Bounds Read Vulnerabilities in Oracle Linux 9 and 10 Oracle has released patches for significant out-of-bounds read vulnerabilities affecting Oracle Linux 9 and 10. Both vulnerabilities, identified as CVE-2026-9499, impact the QTextCodec::codecForName() function, potentially allowing attackers to read sensitive memory locations. The vulnerabilities were disclosed on July 21, 2026, and affect multiple packages in both Linux distributions. The patches include updates for qt5-qtbase in Oracle Linux 9 and qt6-qt5compat in Oracle Linux 10. Users are urged to apply the updates to mitigate potential exploitation. The vulnerabilities are not currently reported as actively exploited in the wild, but the existence of proof-of-concept code raises concerns. Organizations using these versions should prioritize patching to secure their systems. 2 sources 45

Extracted Entities

CVEs (1)

CWE Weaknesses (1)

Cwe-125 - Out-of-bounds Read

Platforms (2)

Linux Oracle Linux