CVE-2026-103653 is an out-of-bounds read vulnerability in the Qt CoAP module's message parsing function QCoapInternalReply::createFromFrame(). A malformed CoAP message can trigger this flaw, potentially causing application crashes or incorrect data processing.