This advisory covers a security update for Red Hat Hardened Images RPMs involving qt6 packages, including qt6-filesystem and related macros. The vulnerability identified by CVE-2026-9499 corresponds to CWE-125, indicating an out-of-bounds read issue. The update provides fixed RPM versions (6.11.1-2.hum1) for multiple architectures and source packages. The advisory does not detail the specific nature of the vulnerability beyond the CWE classification, nor does it confirm active exploitation or provide a CVSS score. The update is available via Red Hat's public repositories.

The vulnerability involves an out-of-bounds read (CWE-125) which can potentially lead to information disclosure or application instability. The advisory classifies the severity as high but the GCVE database rates it as moderate. There are no known exploits in the wild at this time. The impact is limited to systems using the affected qt6 packages within Red Hat Hardened Images RPMs.

Red Hat has released updated RPM packages (version 6.11.1-2.hum1) that address the vulnerability. Users of Red Hat Hardened Images should apply these updates as per Red Hat's official guidance available at https://images.redhat.com/. No additional mitigation steps are indicated or required beyond applying the update.