CVE-2026-103645

CVSS 1.1 (low) · published 2026-11-13

An integer overflow vulnerability in the Qt QTextCodec fromUnicode() and toUnicode() functionality of the Qt 5 Core Compatibility APIs module (Qt 6) and the Qt Core module (Qt 5). Only builds where Qt is compiled with ICU support are affected.

Weakness: CWE-190, CWE-835

Source: NVD CVE-2026-103645

References

• https://codereview.qt-project.org/c/qt/qt5compat/+/762795
• https://www.qt.io/security-advisories?search=CVE-2026-103645

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.