CVE-2026-19248
Fixed in a distro release EPSS <1%CVSS 7.1
QDomDocument XML parsing is vulnerable to a remotely-triggerable denial-of-service crash when processing untrusted input.
Products: qt
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 9 | qt5-qtbase | 5.15.9-11.el9_8.2 |
| AlmaLinux 9 | qt5-qtbase-common | 5.15.9-11.el9_8.2 |
| AlmaLinux 9 | qt5-qtbase-devel | 5.15.9-11.el9_8.2 |
| AlmaLinux 9 | qt5-qtbase-examples | 5.15.9-11.el9_8.2 |
| AlmaLinux 9 | qt5-qtbase-gui | 5.15.9-11.el9_8.2 |
| AlmaLinux 9 | qt5-qtbase-mysql | 5.15.9-11.el9_8.2 |
| AlmaLinux 9 | qt5-qtbase-odbc | 5.15.9-11.el9_8.2 |
| AlmaLinux 9 | qt5-qtbase-postgresql | 5.15.9-11.el9_8.2 |
| AlmaLinux 9 | qt5-qtbase-private-devel | 5.15.9-11.el9_8.2 |
| AlmaLinux 9 | qt5-qtbase-static | 5.15.9-11.el9_8.2 |
| Amazon Linux 2 | qt5-qtbase | 5.15.3-1.amzn2.0.3 |
| Amazon Linux 2 | qt5-qtbase-common | 5.15.3-1.amzn2.0.3 |
| Amazon Linux 2 | qt5-qtbase-devel | 5.15.3-1.amzn2.0.3 |
| Amazon Linux 2 | qt5-qtbase-examples | 5.15.3-1.amzn2.0.3 |
| Amazon Linux 2 | qt5-qtbase-gui | 5.15.3-1.amzn2.0.3 |
| Amazon Linux 2 | qt5-qtbase-mysql | 5.15.3-1.amzn2.0.3 |
| Amazon Linux 2 | qt5-qtbase-odbc | 5.15.3-1.amzn2.0.3 |
| Amazon Linux 2 | qt5-qtbase-postgresql | 5.15.3-1.amzn2.0.3 |
| Amazon Linux 2 | qt5-qtbase-private-devel | 5.15.3-1.amzn2.0.3 |
| Amazon Linux 2 | qt5-qtbase-static | 5.15.3-1.amzn2.0.3 |
| Debian 12 | qt6-base | no fix |
| Debian 12 | qtbase-opensource-src | no fix |
| Debian 13 | qt6-base | no fix |
| Debian 13 | qtbase-opensource-src | no fix |
| Debian 14 | qt6-base | 6.11.2+dfsg-5 |
| Debian 14 | qtbase-opensource-src | 5.15.19+dfsg-5 |
| Red Hat hummingbird 1 | qt5-qtbase | 0:5.15.18-5.2.hum1 |
| Red Hat hummingbird 1 | qt5-qtbase-common | 0:5.15.18-5.2.hum1 |
| Red Hat hummingbird 1 | qt5-qtbase-devel | 0:5.15.18-5.2.hum1 |
| Red Hat hummingbird 1 | qt5-qtbase-examples | 0:5.15.18-5.2.hum1 |
| Red Hat hummingbird 1 | qt5-qtbase-gui | 0:5.15.18-5.2.hum1 |
| Red Hat hummingbird 1 | qt5-qtbase-ibase | 0:5.15.18-5.2.hum1 |
| Red Hat hummingbird 1 | qt5-qtbase-mysql | 0:5.15.18-5.2.hum1 |
| Red Hat hummingbird 1 | qt5-qtbase-odbc | 0:5.15.18-5.2.hum1 |
| Red Hat hummingbird 1 | qt5-qtbase-postgresql | 0:5.15.18-5.2.hum1 |
| Red Hat hummingbird 1 | qt5-qtbase-private-devel | 0:5.15.18-5.2.hum1 |
| Red Hat hummingbird 1 | qt5-qtbase-static | 0:5.15.18-5.2.hum1 |
| Red Hat hummingbird 1 | qt5-qtbase-tds | 0:5.15.18-5.2.hum1 |
| Red Hat hummingbird 1 | qt6-qtbase | 0:6.11.2-2.hum1 |
| Red Hat hummingbird 1 | qt6-qtbase-common | 0:6.11.2-2.hum1 |
| Red Hat hummingbird 1 | qt6-qtbase-devel | 0:6.11.2-2.hum1 |
| Red Hat hummingbird 1 | qt6-qtbase-examples | 0:6.11.2-2.hum1 |
| Red Hat hummingbird 1 | qt6-qtbase-gui | 0:6.11.2-2.hum1 |
| Red Hat hummingbird 1 | qt6-qtbase-ibase | 0:6.11.2-2.hum1 |
| Red Hat hummingbird 1 | qt6-qtbase-mysql | 0:6.11.2-2.hum1 |
| Red Hat hummingbird 1 | qt6-qtbase-odbc | 0:6.11.2-2.hum1 |
| Red Hat hummingbird 1 | qt6-qtbase-postgresql | 0:6.11.2-2.hum1 |
| Red Hat hummingbird 1 | qt6-qtbase-private-devel | 0:6.11.2-2.hum1 |
| Red Hat hummingbird 1 | qt6-qtbase-static | 0:6.11.2-2.hum1 |
| Rocky Linux 9 | qt5-qtbase | 0:5.15.9-11.el9_8.2 |
| Ubuntu 22.04 LTS | qt6-base | no fix |
| Ubuntu 24.04 LTS | qt6-base | no fix |
| Ubuntu 26.04 LTS | qt6-base | no fix |
| Ubuntu 26.04 LTS | qtbase-opensource-src | no fix |
| Ubuntu 26.10 | qt6-base | no fix |
| Ubuntu 26.10 | qtbase-opensource-src | no fix |
| Ubuntu Pro 16.04 LTS | qtbase-opensource-src | no fix |
| Ubuntu Pro 18.04 LTS | qtbase-opensource-src | no fix |
| Ubuntu Pro 20.04 LTS | qtbase-opensource-src | no fix |
| Ubuntu Pro 22.04 LTS | qtbase-opensource-src | no fix |
| Ubuntu Pro 24.04 LTS | qtbase-opensource-src | no fix |