CVE-2026-13326

Fixed in a distro release EPSS <1%CVSS 6.9

An out-of-bounds read in Qt NFC's language code length parsing allows a physically proximate attacker to cause a denial of service or limited memory disclosure via a crafted NFC tag.

Published 2026-09-11 · CVE record · OSV

Products: qt

Distro releases