CVE-2026-95509

UNKNOWN

Description

Strings optimized for Latin-1 displaying Latin-1 characters cause incorrect String.arg() formatting by an incorrect buffer size calculation, causing out-of-bounds reading.

Timeline

Published:September 29th, 2026 11:16 AM

Last modified:September 30th, 2026 4:30 PM

CVSS Scoring

No CVSS v3 score available

Weaknesses (CWE)

CWE-125 CWE-131

References & Reports

Advisories, patches, and third-party reports

https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-95509:

Source: NIST NVD · Data may lag official sources by up to one minute