This vulnerability involves an out-of-bounds read (CWE-125) in the Qt NFC component's handling of language code length parsing. An attacker with physical proximity can exploit this by presenting a maliciously crafted NFC tag, leading to denial of service or limited disclosure of memory contents. The flaw affects Qt versions >=5.2.0 <6.8.9 and >=6.9.0 <6.11.2. The CVSS 4.0 vector indicates the attack requires adjacent network access, low complexity, no privileges, user interaction, and results in high impact on availability and limited impact on confidentiality.

Successful exploitation can cause a denial of service or limited disclosure of memory data. The attack requires physical proximity to the vulnerable device's NFC interface and user interaction. There is no indication of remote exploitation or privilege escalation. No known exploits are reported in the wild.

No explicit patch or remediation details are provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid interacting with untrusted NFC tags and consider disabling NFC functionality if not required.