PT-2026-121831
CVE-2026-95620
·
Published
2026-10-23
·
Updated
2026-10-23
Description by
CVSS 4.0
2.1
LowMetricsAV:N/AC:H/AT:P/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/RE:L/U:Green
Name of the Vulnerable Software and Affected Versions
Qt (affected versions not specified)
Description
A use-after-free issue in the Qt Network module's HTTP/2 client support within QNetworkAccessManager allows a malicious or compromised HTTP/2 server to trigger a crash in the client application, impacting availability. Use-after-free occurs when a program continues to use a pointer after it has been freed, which can lead to crashes or arbitrary code execution.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾