CVE-2026-107157EPSS p3.9%

CVE-2026-107157CVE-2026-107157

Description

Specially crafted CBOR input passed to QCborValue::fromCbor() in Qt Core can cause an out-of-bounds read, which may crash the application and could expose information.

Scoring

EPSS0.15% probability of exploitation · percentile 3.9% · 2026-10-27T12:03:15Z
Last modified2026-10-27
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.