CVE-2026-19248

Summary

QDomDocument XML parsing is vulnerable to a remotely-triggerable denial-of-service crash when processing untrusted input.

Affected Software

VendorProductVersion RangeStatus
qtqt2.2.0 <= 6.8.8affected
qtqt6.9.0 <= 6.11.1affected

Weaknesses

  • CWE-674: CWE-674 Uncontrolled Recursion

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References