CVE-2026-100140

CVSS 1.9 (low) · published 2026-11-02

An integer overflow vulnerability in the Qt XML parsing (Qt5Compat / QXmlSimpleReader) functionality of Qt.

Weakness: CWE-190

Source: NVD CVE-2026-100140

References

• https://codereview.qt-project.org/c/qt/qt5compat/+/764751
• https://codereview.qt-project.org/c/qt/qt5compat/+/768900
• https://codereview.qt-project.org/c/qt/qt5compat/+/768901
• https://codereview.qt-project.org/c/qt/qt5compat/+/768902
• https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-100140:

Check your software

Connect an AI agent to the Fixlane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.