Medium
An empty attribute value in styled text triggers a parser error that halts the device.
In Qt for MCUs, a Text element that displays styled text halts the device if an tag in the text contains an attribute with an empty value. The text parser passes the empty value to an internal check that only accepts non-empty values. The check fails and reports an error, and the default error handler halts the device.
Announced Source revision 1
Original source ↗CVE-2026-19395
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-19395
Qt for MCUs
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"vendor": "qt",
"modules": [
"qul"
],
"product": "Qt for MCUs",
"versions": [
{
"status": "affected",
"version": "2.12.0",
"lessThan": "2.12.3",
"versionType": "python"
}
],
"defaultStatus": "unaffected"
}
]- Related CVEs
- CVE-2026-19395
Source reference:
/cveMetadata/cveId
Publisher severity
medium
Source reference: /containers/cna/metrics
- Event
- #8572 · Revision 1
- Added to Heist Feed
- Publisher date