MEDIUM 6.7 NVD
CVE-2026-103653
An out-of-bounds read vulnerability in the Qt CoAP message parsing (QCoapInternalReply::createFromFrame()) of the Qt CoAP module. Processing a malformed CoAP me
An out-of-bounds read vulnerability in the Qt CoAP message parsing (QCoapInternalReply::createFromFrame()) of the Qt CoAP module. Processing a malformed CoAP message can cause an application using Qt CoAP to crash (loss of availability) or to continue operating on incorrect data (potential loss of integrity).
References
- https://codereview.qt-project.org/c/qt/qtcoap/+/760652
- https://codereview.qt-project.org/c/qt/qtcoap/+/761120
- https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-103653:
This medium severity vulnerability with a CVSS score of 6.7 was published on 2026-11-03 via NVD.
vulnfeed aggregates 18371 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.