CVE-2026-107457 - Vulnerability Details - OpenCVE

A memory corruption vulnerability in the QMqttClient class of the Qt MQTT module. Under certain MQTT 5 connection settings between client and server, QMqttClient may corrupt memory, which can cause the application to crash.

Attack Vector Network

Attack Complexity Low

Privileges Required None

Attack Requirements Present

User Interaction Passive

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Vendors	Products
Qt Subscribe	Qt Subscribe Qtmqtt Subscribe

No data.

No data.

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://codereview.qt-project.org/c/qt/qtmqtt/+/762286
https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-107457:

History

Mon, 02 Nov 2026 08:45:00 +0000

Type	Values Removed	Values Added
Description		A memory corruption vulnerability in the QMqttClient class of the Qt MQTT module. Under certain MQTT 5 connection settings between client and server, QMqttClient may corrupt memory, which can cause the application to crash.
Title		Memory corruption vulnerability in QMqttClient impacts Qt MQTT
First Time appeared		Qt Qt qt Qt qtmqtt
Weaknesses		CWE-129 CWE-787
CPEs		cpe:2.3:a:qt:qt:::::::: cpe:2.3:a:qt:qtmqtt::::::::
Vendors & Products		Qt Qt qt Qt qtmqtt
References		https://codereview.qt-project.org/c/qt/qtmqtt/+/762286 https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-107457:
Metrics		cvssV4_0 `{'score': 2.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/R:U/RE:L/U:Green'}`

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: Qt

Published: 2026-11-02T08:38:12.500Z

Updated: 2026-11-02T08:38:12.500Z

Reserved: 2026-10-08T05:22:08.839Z

Link: CVE-2026-107457

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-11-02T09:17:36.430

Modified: 2026-11-02T09:17:36.430

Link: CVE-2026-107457

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-107457", "assignerOrgId": "a59d8014-47c4-4630-ab43-e1b13cbe58e3", "state": "PUBLISHED", "assignerShortName": "Qt", "dateReserved": "2026-10-08T05:22:08.839Z", "datePublished": "2026-11-02T08:38:12.500Z", "dateUpdated": "2026-11-02T08:38:12.500Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "a59d8014-47c4-4630-ab43-e1b13cbe58e3", "shortName": "Qt", "dateUpdated": "2026-11-02T08:38:12.500Z"}, "title": "Memory corruption vulnerability in QMqttClient impacts Qt MQTT", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-787", "description": "CWE-787 Out-of-bounds Write", "type": "CWE"}]}, {"descriptions": [{"lang": "en", "cweId": "CWE-129", "description": "CWE-129 Improper Validation of Array Index", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-100", "descriptions": [{"lang": "en", "value": "CAPEC-100 Overflow Buffers"}]}], "affected": [{"vendor": "qt", "product": "Qt", "modules": ["qtmqtt"], "versions": [{"status": "affected", "version": "5.12.0", "lessThanOrEqual": "6.8.8", "versionType": "python"}, {"status": "affected", "version": "6.9.0", "lessThanOrEqual": "6.11.2", "versionType": "python"}, {"status": "unaffected", "version": "0", "lessThan": "5.12.0", "versionType": "python"}], "defaultStatus": "unaffected", "cpes": ["cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*", "cpe:2.3:a:qt:qtmqtt:*:*:*:*:*:*:*:*"]}], "cpeApplicability": [{"operator": "OR", "nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.12.0", "versionEndIncluding": "6.8.8"}, {"vulnerable": true, "criteria": "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.9.0", "versionEndIncluding": "6.11.2"}, {"vulnerable": false, "criteria": "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*", "versionStartIncluding": "0", "versionEndExcluding": "5.12.0"}]}]}], "descriptions": [{"lang": "en", "value": "A memory corruption vulnerability in the QMqttClient class of the Qt MQTT module.\u00a0Under certain MQTT 5 connection settings between client and server, QMqttClient may corrupt memory, which can cause the application to crash.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "A memory corruption vulnerability in the QMqttClient class of the Qt MQTT module. Under certain MQTT 5 connection settings between client and server, QMqttClient may corrupt memory, which can cause the application to crash."}]}], "references": [{"url": "https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-107457:", "tags": ["vendor-advisory"]}, {"url": "https://codereview.qt-project.org/c/qt/qtmqtt/+/762286", "tags": ["patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "userInteraction": "PASSIVE", "vulnConfidentialityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subAvailabilityImpact": "NONE", "exploitMaturity": "UNREPORTED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "USER", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "LOW", "providerUrgency": "GREEN", "version": "4.0", "baseSeverity": "LOW", "baseScore": 2.3, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/R:U/RE:L/U:Green"}}], "source": {"discovery": "INTERNAL"}, "x_generator": {"engine": "Vulnogram 1.0.5"}}}}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*", "cpe:2.3:a:qt:qtmqtt:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "modules": ["qtmqtt"], "product": "Qt", "vendor": "qt", "versions": [{"lessThanOrEqual": "6.8.8", "status": "affected", "version": "5.12.0", "versionType": "python"}, {"lessThanOrEqual": "6.11.2", "status": "affected", "version": "6.9.0", "versionType": "python"}, {"lessThan": "5.12.0", "status": "unaffected", "version": "0", "versionType": "python"}]}], "source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A memory corruption vulnerability in the QMqttClient class of the Qt MQTT module.\u00a0Under certain MQTT 5 connection settings between client and server, QMqttClient may corrupt memory, which can cause the application to crash."}], "id": "CVE-2026-107457", "lastModified": "2026-11-02T09:17:36.430", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "USER", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 2.3, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "UNREPORTED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "GREEN", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "PASSIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:U/V:X/RE:L/U:Green", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "LOW"}, "source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3", "type": "Secondary"}]}, "published": "2026-11-02T09:17:36.430", "references": [{"source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3", "url": "https://codereview.qt-project.org/c/qt/qtmqtt/+/762286"}, {"source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3", "url": "https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-107457:"}], "sourceIdentifier": "a59d8014-47c4-4630-ab43-e1b13cbe58e3", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-129"}, {"lang": "en", "value": "CWE-787"}], "source": "a59d8014-47c4-4630-ab43-e1b13cbe58e3", "type": "Secondary"}]}