Search: CVE-2026-76151

CVE-2026-76151 is an out-of-bounds read vulnerability in the HTTP Cache-Control response header parsing within the QtNetwork module of Qt versions 6.0.0 through 6.8.8 and 6.9.0 through 6.11.1. This flaw allows remote attackers to cause a denial of service (application crash) by sending an excessively large Cache-Control header value from an untrusted or compromised HTTP server to a client application using QNetworkAccessManager. The issue affects only the client side, does not impact 32-bit builds, and involves read-only out-of-bounds access without information disclosure or code execution.