CVE-2026-51106: n/a

This vulnerability in TokTok qTox v1.18.4 is caused by a flaw in the src/persistence/serialize.cpp component, which can be exploited by a local attacker to trigger a denial of service condition. The issue is associated with improper handling of serialized data (CWE-502) and resource exhaustion (CWE-400). The CVSS v3.1 score is 9.3, indicating critical severity with network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and high impact on confidentiality and integrity but no impact on availability.

An attacker with local access can cause a denial of service, potentially disrupting the normal operation of the affected application. The vulnerability also impacts confidentiality and integrity significantly, as indicated by the CVSS vector, though availability impact is not noted. There is no evidence of known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is available at this time.