Low
qt6-declarative — security advisory
Out-of-bounds read while parsing untrusted SVG path strings in Qt Quick's Context2D.path / PathSvg.path.
- Products
- qt6-declarative
- Affected versions
- 6.10.2+dfsg-3, 6.10.2+dfsg-6, 6.11.2+dfsg-2ubuntu1, 6.2.2+dfsg-4ubuntu1, 6.2.4+dfsg-2ubuntu1, 6.2.4+dfsg-3ubuntu1, 6.4.2+dfsg-3, 6.4.2+dfsg-4, 6.4.2+dfsg-4build1, 6.4.2+dfsg-4build2, 6.4.2+dfsg-4build3, 6.9.2+dfsg-1, 6.9.2+dfsg-5
- Fixed versions
- Not specified
- CVEs
- CVE-2026-79616
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 03:19 UTC · Revision 1
Source evidence
Out-of-bounds read while parsing untrusted SVG path strings in Qt Quick's Context2D.path / PathSvg.path.
osv:UBUNTU-CVE-2026-79616
qt6-declarative
Fixed versions: Not specified
qt6-declarative
Fixed versions: Not specified
qt6-declarative
Fixed versions: Not specified
qt6-declarative
Fixed versions: Not specified
Complete source record
{
"id": "b5d5a72288ffa5ddc3fba198f73f7feb95ac8bc9c9f7d2a8c06e37a4a15989fe",
"url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-79616",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "UBUNTU-CVE-2026-79616",
"summary": "Out-of-bounds read while parsing untrusted SVG path strings in Qt Quick's Context2D.path / PathSvg.path.",
"evidence": "osv:UBUNTU-CVE-2026-79616",
"products": [
{
"name": {
"value": "qt6-declarative",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "6.2.2+dfsg-4ubuntu1",
"evidence": "/affected/0/versions"
},
{
"value": "6.2.4+dfsg-2ubuntu1",
"evidence": "/affected/0/versions"
},
{
"value": "6.2.4+dfsg-3ubuntu1",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "qt6-declarative",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "6.4.2+dfsg-3",
"evidence": "/affected/1/versions"
},
{
"value": "6.4.2+dfsg-4",
"evidence": "/affected/1/versions"
},
{
"value": "6.4.2+dfsg-4build1",
"evidence": "/affected/1/versions"
},
{
"value": "6.4.2+dfsg-4build2",
"evidence": "/affected/1/versions"
},
{
"value": "6.4.2+dfsg-4build3",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "qt6-declarative",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "6.10.2+dfsg-3",
"evidence": "/affected/2/versions"
},
{
"value": "6.10.2+dfsg-6",
"evidence": "/affected/2/versions"
},
{
"value": "6.11.2+dfsg-2ubuntu1",
"evidence": "/affected/2/versions"
}
]
},
{
"name": {
"value": "qt6-declarative",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "6.9.2+dfsg-1",
"evidence": "/affected/3/versions"
},
{
"value": "6.9.2+dfsg-5",
"evidence": "/affected/3/versions"
},
{
"value": "6.10.2+dfsg-3",
"evidence": "/affected/3/versions"
}
]
}
],
"severity": "low",
"structured": {
"id": "UBUNTU-CVE-2026-79616",
"aliases": [
"UBUNTU-CVE-2026-79616"
],
"metrics": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/R:U/RE:L/U:Green"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "qt6-declarative",
"purl": "pkg:deb/ubuntu/qt6-declarative?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"6.2.2+dfsg-4ubuntu1",
"6.2.4+dfsg-2ubuntu1",
"6.2.4+dfsg-3ubuntu1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-79616.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libqt6labsanimation6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6labsfolderlistmodel6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6labsqmlmodels6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6labssettings6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6labssharedimage6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6labswavefrontmesh6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6qml6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6qmlcore6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6qmllocalstorage6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6qmlmodels6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6qmlworkerscript6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6qmlxmllistmodel6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6quick6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6quickcontrols2-6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6quickcontrols2impl6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6quickdialogs2-6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6quickdialogs2quickimpl6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6quickdialogs2utils6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6quicklayouts6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6quickparticles6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6quickshapes6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6quicktemplates2-6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6quicktest6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "libqt6quickwidgets6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml-qt6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qt-labs-animation",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qt-labs-folderlistmodel",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qt-labs-platform",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qt-labs-qmlmodels",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qt-labs-settings",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qt-labs-sharedimage",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qt-labs-wavefrontmesh",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qtcore",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qtqml",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qtqml-models",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qtqml-workerscript",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qtqml-xmllistmodel",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qtquick",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qtquick-controls",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qtquick-dialogs",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qtquick-layouts",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qtquick-localstorage",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qtquick-nativestyle",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qtquick-particles",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qtquick-shapes",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qtquick-templates",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qtquick-tooling",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qtquick-window",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qml6-module-qttest",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qmlscene-qt6",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qt6-declarative-dev-tools",
"binary_version": "6.2.4+dfsg-3ubuntu1"
},
{
"binary_name": "qt6-qmltooling-plugins",
"binary_version": "6.2.4+dfsg-3ubuntu1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "qt6-declarative",
"purl": "pkg:deb/ubuntu/qt6-declarative?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"6.4.2+dfsg-3",
"6.4.2+dfsg-4",
"6.4.2+dfsg-4build1",
"6.4.2+dfsg-4build2",
"6.4.2+dfsg-4build3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-79616.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libqt6labsanimation6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6labsfolderlistmodel6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6labsqmlmodels6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6labssettings6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6labssharedimage6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6labswavefrontmesh6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6qml6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6qmlcompiler6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6qmlcore6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6qmllocalstorage6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6qmlmodels6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6qmlworkerscript6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6qmlxmllistmodel6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6quick6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6quickcontrols2-6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6quickcontrols2impl6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6quickdialogs2-6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6quickdialogs2quickimpl6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6quickdialogs2utils6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6quicklayouts6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6quickparticles6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6quickshapes6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6quicktemplates2-6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6quicktest6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "libqt6quickwidgets6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml-qt6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qt-labs-animation",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qt-labs-folderlistmodel",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qt-labs-platform",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qt-labs-qmlmodels",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qt-labs-settings",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qt-labs-sharedimage",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qt-labs-wavefrontmesh",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qtcore",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qtqml",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qtqml-models",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qtqml-workerscript",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qtqml-xmllistmodel",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qtquick",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qtquick-controls",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qtquick-dialogs",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qtquick-layouts",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qtquick-localstorage",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qtquick-nativestyle",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qtquick-particles",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qtquick-shapes",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qtquick-templates",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qtquick-tooling",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qtquick-window",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qml6-module-qttest",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qmlscene-qt6",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qt6-declarative-dev-tools",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qt6-declarative-doc-html",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qt6-declarative-examples",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qt6-qmllint-plugins",
"binary_version": "6.4.2+dfsg-4build3"
},
{
"binary_name": "qt6-qmltooling-plugins",
"binary_version": "6.4.2+dfsg-4build3"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "qt6-declarative",
"purl": "pkg:deb/ubuntu/qt6-declarative?arch=source&distro=stonking",
"ecosystem": "Ubuntu:26.10"
},
"versions": [
"6.10.2+dfsg-3",
"6.10.2+dfsg-6",
"6.11.2+dfsg-2ubuntu1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-79616.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libqt6labsplatform6",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "libqt6labsstylekit6",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "libqt6labssynchronizer6",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "libqt6qml6",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "libqt6qmlcompiler6",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "libqt6qmlmeta6",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "libqt6qmlmodels6",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "libqt6qmlnetwork6",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "libqt6qmlworkerscript6",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "libqt6quick6",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "libqt6quickcontrols2-6",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "libqt6quickshapes6",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "libqt6quickshapesdesignhelpers6",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "libqt6quicktemplates2-6",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "libqt6quicktest6",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "libqt6quickvectorimage6",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "libqt6quickvectorimagegenerator6",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "libqt6quickvectorimagehelpers6",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "libqt6quickwidgets6",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "qml-qt6",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "qml6-module-qml",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "qml6-module-qmltime",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "qml6-module-qt-labs-animation",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "qml6-module-qt-labs-folderlistmodel",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "qml6-module-qt-labs-platform",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "qml6-module-qt-labs-qmlmodels",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "qml6-module-qt-labs-settings",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "qml6-module-qt-labs-sharedimage",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "qml6-module-qt-labs-stylekit",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "qml6-module-qt-labs-synchronizer",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "qml6-module-qt-labs-wavefrontmesh",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "qml6-module-qtcore",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "qml6-module-qtnetwork",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "qml6-module-qtqml",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "qml6-module-qtqml-models",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "qml6-module-qtqml-workerscript",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "qml6-module-qtqml-xmllistmodel",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "qml6-module-qtquick",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "qml6-module-qtquick-controls",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "qml6-module-qtquick-dialogs",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "qml6-module-qtquick-effects",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "qml6-module-qtquick-layouts",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "qml6-module-qtquick-localstorage",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "qml6-module-qtquick-particles",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "qml6-module-qtquick-shapes",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "qml6-module-qtquick-shapes-designhelpers",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "qml6-module-qtquick-templates",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "qml6-module-qtquick-tooling",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "qml6-module-qtquick-vectorimage",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "qml6-module-qtquick-vectorimage-helpers",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "qml6-module-qtquick-window",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "qml6-module-qttest",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "qmlscene-qt6",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "qt6-declarative-dev-tools",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "qt6-declarative-doc-html",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "qt6-declarative-examples",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "qt6-qmllint-plugins",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "qt6-qmlls-plugins",
"binary_version": "6.11.2+dfsg-2ubuntu1"
},
{
"binary_name": "qt6-qmltooling-plugins",
"binary_version": "6.11.2+dfsg-2ubuntu1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "qt6-declarative",
"purl": "pkg:deb/ubuntu/qt6-declarative?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"6.9.2+dfsg-1",
"6.9.2+dfsg-5",
"6.10.2+dfsg-3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-79616.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libqt6labsplatform6",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "libqt6labssynchronizer6",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "libqt6qml6",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "libqt6qmlcompiler6",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "libqt6qmlmeta6",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "libqt6qmlmodels6",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "libqt6qmlnetwork6",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "libqt6qmlworkerscript6",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "libqt6quick6",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "libqt6quickcontrols2-6",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "libqt6quickshapes6",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "libqt6quickshapesdesignhelpers6",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "libqt6quicktemplates2-6",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "libqt6quicktest6",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "libqt6quickvectorimage6",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "libqt6quickvectorimagegenerator6",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "libqt6quickvectorimagehelpers6",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "libqt6quickwidgets6",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml-qt6",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qml",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qmltime",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qt-labs-animation",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qt-labs-assetdownloader",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qt-labs-folderlistmodel",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qt-labs-platform",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qt-labs-qmlmodels",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qt-labs-settings",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qt-labs-sharedimage",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qt-labs-synchronizer",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qt-labs-wavefrontmesh",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qtcore",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qtnetwork",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qtqml",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qtqml-models",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qtqml-workerscript",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qtqml-xmllistmodel",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qtquick",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qtquick-controls",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qtquick-dialogs",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qtquick-effects",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qtquick-layouts",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qtquick-localstorage",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qtquick-particles",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qtquick-shapes",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qtquick-shapes-designhelpers",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qtquick-templates",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qtquick-tooling",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qtquick-vectorimage",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qtquick-vectorimage-helpers",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qtquick-window",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qml6-module-qttest",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qmlscene-qt6",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qt6-declarative-dev-tools",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qt6-declarative-doc-html",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qt6-declarative-examples",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qt6-qmllint-plugins",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qt6-qmlls-plugins",
"binary_version": "6.10.2+dfsg-3"
},
{
"binary_name": "qt6-qmltooling-plugins",
"binary_version": "6.10.2+dfsg-3"
}
]
}
}
],
"modified": "2026-10-17T13:01:09.877691934Z",
"provider": "osv",
"upstream": [
"CVE-2026-79616"
],
"references": [
"https://ubuntu.com/security/CVE-2026-79616",
"https://www.cve.org/CVERecord?id=CVE-2026-79616",
"https://codereview.qt-project.org/c/qt/qtdeclarative/+/754718"
]
},
"related_cves": [
{
"value": "CVE-2026-79616",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 361102,
"published_at": "2026-09-23T10:17:00+00:00"
}