CVE-2026-94370
UNKNOWNDescription
A defect in the Qt for MCUs core string handling causes heap memory corruption. When an application passes text into Qt Quick Ultralite using the public Qul::String interface type, and that text is held in a std::string, the conversion to the internal string type copies the pointer without taking ownership of it. Two objects then release the same memory, producing a double free, an invalid free, or a use-after-free.
Timeline
Published:October 14th, 2026 6:17 AM
Last modified:October 15th, 2026 3:53 PM
CVSS Scoring
No CVSS v3 score available
References & Reports
Advisories, patches, and third-party reports
Source: NIST NVD · Data may lag official sources by up to one minute