{"schema_version":"1","data":[{"id":22200,"advisory_id":"354866ea-d089-40fa-9e6b-bf4dd1647543","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-94370","source_published_at":"2026-10-14T05:43:27.953+00:00","published_at":"2026-10-25T05:58:00.425283+00:00","extraction_method":"structured","technologies":["core-cve","qt-for-mcus"],"cve_ids":["CVE-2026-94370"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Memory corruption (double free / use-after-free) vulnerability in core string handling impacts Qt for MCUs","summary":"A defect in the Qt for MCUs core string handling causes heap memory corruption. When an application passes text into Qt Quick Ultralite using the public Qul::String interface type, and that text is held in a std::string, the conversion to the internal string type copies the pointer without taking ownership of it. Two objects then release the same memory, producing a double free, an invalid free, or a use-after-free.","evidence":"cve:CVE-2026-94370","products":[{"name":{"value":"Qt_for_MCUs","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-94370","aliases":["CVE-2026-94370"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"PRESENT","version":"4.0","Recovery":"USER","baseScore":6.5,"Automatable":"NO","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"DIFFUSE","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:H/E:U/S:P/AU:N/R:U/V:D/RE:M","exploitMaturity":"UNREPORTED","providerUrgency":"NOT_DEFINED","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnerabilityResponseEffort":"MODERATE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"qt","modules":["qul"],"product":"Qt_for_MCUs","versions":[{"status":"affected","version":"2.12.1","lessThan":"2.12.3","versionType":"python"}],"defaultStatus":"unaffected"}],"modified":"2026-10-14T16:02:30.639Z","provider":"cve","references":["https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-94370:"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-94370","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-14T16:02:10.297104Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-14T16:02:30.639Z"}}],"cna":{"orgId":"a59d8014-47c4-4630-ab43-e1b13cbe58e3","shortName":"Qt","dateUpdated":"2026-10-14T05:43:27.953Z"}}},"related_cves":[{"value":"CVE-2026-94370","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"context_update":false},{"id":8572,"advisory_id":"3607fd07-f5d8-4fa4-9aa3-c65e52604fb1","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-19395","source_published_at":"2026-10-05T09:18:28.379+00:00","published_at":"2026-10-24T23:03:07.437658+00:00","extraction_method":"structured","technologies":["core-cve","qt-for-mcus"],"cve_ids":["CVE-2026-19395"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"An empty attribute value in styled text triggers a parser error that halts the device.","summary":"In Qt for MCUs, a Text element that displays styled text halts the device if an tag in the text contains an attribute with an empty value. The text parser passes the empty value to an internal check that only accepts non-empty values. The check fails and reports an error, and the default error handler halts the device.","evidence":"cve:CVE-2026-19395","products":[{"name":{"value":"Qt for MCUs","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-19395","aliases":["CVE-2026-19395"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":6.6,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U","exploitMaturity":"UNREPORTED","providerUrgency":"NOT_DEFINED","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"qt","modules":["qul"],"product":"Qt for MCUs","versions":[{"status":"affected","version":"2.12.0","lessThan":"2.12.3","versionType":"python"}],"defaultStatus":"unaffected"}],"modified":"2026-10-05T12:04:27.598Z","provider":"cve","references":["https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-19395:"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-19395","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-05T12:00:28.733595Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-05T12:04:27.598Z"}}],"cna":{"orgId":"a59d8014-47c4-4630-ab43-e1b13cbe58e3","shortName":"Qt","dateUpdated":"2026-10-05T09:18:28.379Z"}}},"related_cves":[{"value":"CVE-2026-19395","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"context_update":false},{"id":3496,"advisory_id":"3fd61c22-70bd-42fa-a845-c9b40edf4fae","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-95509","source_published_at":"2026-09-29T10:40:12.578+00:00","published_at":"2026-10-24T21:36:10.286346+00:00","extraction_method":"structured","technologies":["core-cve","qt-for-mcus"],"cve_ids":["CVE-2026-95509"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Out-of-bounds read vulnerability in string formatting impacts Qt for MCUs","summary":"Strings optimized for Latin-1 displaying Latin-1 characters cause incorrect String.arg() formatting by an incorrect buffer size calculation, causing out-of-bounds reading.","evidence":"cve:CVE-2026-95509","products":[{"name":{"value":"Qt for MCUs","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-95509","aliases":["CVE-2026-95509"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":8.8,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"HIGH","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"qt","modules":["qul"],"product":"Qt for MCUs","versions":[{"status":"affected","version":"2.6.0","lessThan":"2.11.3","versionType":"python"},{"status":"affected","version":"2.12.0","lessThan":"2.12.3","versionType":"python"}],"defaultStatus":"unaffected"}],"modified":"2026-09-29T15:02:15.870Z","provider":"cve","references":["https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-95509:"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-95509","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-29T15:02:05.437104Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T15:02:15.870Z"}}],"cna":{"orgId":"a59d8014-47c4-4630-ab43-e1b13cbe58e3","shortName":"Qt","dateUpdated":"2026-09-29T10:40:12.578Z"}}},"related_cves":[{"value":"CVE-2026-95509","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"context_update":false}],"next_after":22200,"next_before":3496}