Search: CVE-2026-107157

CVE-2026-107157 is an out-of-bounds read vulnerability in the Qt Core library's QCborValue::fromCbor() function. It occurs when specially crafted CBOR input is processed, potentially causing application crashes and information exposure. The vulnerability affects Qt versions from 5.12.0 through 6.8.8 and 6.9.0 through 6.11.2. The CVSS 4.0 score is low, reflecting limited impact and high attack complexity. No public exploits or patches are currently documented.