The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Out-of-bounds read (buffer over-read) in the HTTP Cache-Control response header parsing in the QtNetwork module in Qt Group Qt 6.0.0 through 6.8.8, and 6.9.0 through 6.11.1, allows remote attackers to cause a denial of service (application crash) via an excessively large Cache-Control header value returned by an untrusted or compromised HTTP server to an application using QNetworkAccessManager. Only the client side of the connection is affected and 32-bit builds are not affected; the out-of-bounds access is read-only, with no information disclosure and no code execution.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade qt5-qtbase-staticUpgrade qt5-qtbase-odbcUpgrade qt5-qtbase-debuginfoUpgrade qt5-qtbase-postgresqlUpgrade qt5-qtbaseUpgrade qt5-qtbase-private-develUpgrade qt5-qtbase-guiUpgrade qt5-qtbase-commonUpgrade qt5-qtbase-mysqlUpgrade qt5-qtbase-examplesUpgrade qt5-qtbase-devel | Oct 19, 2026 | Oct 19, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub