Qt is a cross-platform application development framework used to build GUI and non-GUI software across desktop and embedded platforms.
Overview
Qt is a cross-platform application development framework used to build GUI and non-GUI software across desktop and embedded platforms. Recent disclosures describe a critical denial-of-service risk in Qt (tracked as 2025:7923) and a related Ubuntu security advisory, underscoring the security impact of Qt-based applications and the need for prompt patching.
Related Threat Clusters
-
Multiple CVEs Identified in Qt HTTP2 Implementation
Two vulnerabilities have been discovered in the HTTP2 implementation of Qt affecting multiple versions. CVE-2023-51714, published on December 24, 2023, involves an HPack integer overflow check issue, while…
2 articles · Updated February 18, 2026 -
Critical Qt Vulnerability in Ubuntu 22.04 LTS and 20.04 LTS
A critical vulnerability in Qt affects Ubuntu 22.04 LTS and 20.04 LTS, allowing attackers to crash the system or execute arbitrary code by tricking users into opening specially crafted files. The issue arises from…
2 articles · Updated December 11, 2025
Recent Intelligence Reports
- CVE-2023-51714 An issue was discovered in the HTTP2 implementation in Qt before 5.15.17 6.x before 6.2.11 6.3.x through 6.5.x before 6.5.4 and 6.6.x before 6.6.2. network/access/http2/hpacktable.cpp has an incorrect HPack integer overflow check. — Api.Msrc.Microsoft · February 18, 2026
- CVE-2024-39936 An issue was discovered in HTTP2 in Qt before 5.15.18 6.x before 6.2.13 6.3.x through 6.5.x before 6.5.7 and 6.6.x through 6.7.x before 6.7.3. Code to make security-relevant decisions about an established connection may execute too early because the encrypted() signal has not yet been emitted and processed.. — Api.Msrc.Microsoft · February 18, 2026
- Ubuntu 22.04 LTS: Qt Critical Denial of Service Risk 2025:7923 — Linuxsecurity · December 11, 2025
- USN-7923-1: Qt vulnerability — Ubuntu · December 11, 2025