--- title: Security advisory: CVE- 2026- 105924 NULL pointer... description: A NULL pointer dereference vulnerability, tracked as CVE-2026-105924, affects Qt Core's QCborValue to JSON conversion. The bug can crash applications,... canonical: https://daily.dev/posts/security-advisory-cve--2026--105924-null-pointer-dereference-vulnerability-in-qcborvalue-to-json-co-cokdnkak3 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Security advisory: CVE- 2026- 105924 NULL pointer dereference vulnerability in QCborValue to JSON conversion impacts Qt | daily.dev og:description: A NULL pointer dereference vulnerability, tracked as CVE-2026-105924, affects Qt Core's QCborValue to JSON conversion. The bug can crash applications,... og:url: https://daily.dev/posts/security-advisory-cve--2026--105924-null-pointer-dereference-vulnerability-in-qcborvalue-to-json-co-cokdnkak3 og:image: https://api.daily.dev/og/posts/cokDNKaK3.png og:image:alt: Security advisory: CVE- 2026- 105924 NULL pointer dereference vulnerability in QCborValue to JSON conversion impacts Qt og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Security advisory: CVE- 2026- 105924 NULL pointer dereference vulnerability in QCborValue to JSON conversion impacts Qt **[Qt](https://daily.dev/sources/qt)** · 1 min read · 0 upvotes · 0 comments ## Summary A NULL pointer dereference vulnerability, tracked as CVE-2026-105924, affects Qt Core's QCborValue to JSON conversion. The bug can crash applications, resulting in a denial of service. Qt recommends updating to Qt 6.8.10, 6.11.3, or 6.12.1, or applying a patch. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How do I fix CVE-2026-105924 in Qt? Update to Qt 6.8.10, 6.11.3, or 6.12.1, or apply the available patch. The vulnerability is a NULL pointer dereference in Qt Core's QCborValue to JSON conversion that can crash applications, causing a denial of service. _Teams patching Qt against DoS bugs can track advisories like this one on daily.dev._ ### What is CVE-2026-105924? It is a NULL pointer dereference vulnerability in Qt Core's conversion of QCborValue to JSON, which can crash an application and cause a denial of service. Qt fixed it in versions 6.8.10, 6.11.3, and 6.12.1, with a patch also available for affected versions. _Stay ahead of Qt vulnerabilities affecting production apps by following security advisories on daily.dev._ ## Similar posts on daily.dev - [Security advisory: CVE-2026-107157 Out-of-bounds read vulnerability in QCborValue::fromCbor\(\) impacts Qt Framework](https://daily.dev/posts/security-advisory-cve-2026-107157-out-of-bounds-read-vulnerability-in-qcborvalue-fromcbor-impact-sehtor5ev) · Qt · 0 upvotes · 0 comments - [Security advisory: CVE-2026-96432 - Null pointer dereference vulnerability in QNetworkAccessManager impacts Qt](https://daily.dev/posts/security-advisory-cve-2026-96432---null-pointer-dereference-vulnerability-in-qnetworkaccessmanager--zmilvwptr) · Qt · 0 upvotes · 0 comments - [Security advisory: CVE-2026-101201 Out-of-bounds read vulnerability in JSON document parsing functionality impacts Qt Core and Qt 5 Core Compatibility APIs](https://daily.dev/posts/security-advisory-cve-2026-101201-out-of-bounds-read-vulnerability-in-json-document-parsing-functio-8qpkvlkym) · Qt · 0 upvotes · 0 comments - [Security advisory: CVE-2026-105923 - Null-pointer dereference in QTriangulator reachable through VectorImage](https://daily.dev/posts/security-advisory-cve-2026-105923---null-pointer-dereference-in-qtriangulator-reachable-through-vec-kixgczvsl) · Qt · 1 upvotes · 0 comments - [Security advisory: CVE-2026-107590: Out-of-bounds write vulnerability in QTextCodec iconv-based encoding impacts Qt](https://daily.dev/posts/security-advisory-cve-2026-107590-out-of-bounds-write-vulnerability-in-qtextcodec-iconv-based-enco-gj5jrwyu9) · Qt · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#cyber](https://daily.dev/tags/cyber), [#qt](https://daily.dev/tags/qt) [View this post on daily.dev](https://daily.dev/posts/security-advisory-cve--2026--105924-null-pointer-dereference-vulnerability-in-qcborvalue-to-json-co-cokdnkak3) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Security advisory: CVE- 2026- 105924 NULL pointer dereference vulnerability in QCborValue to JSON conversion impacts Qt","url":"https://daily.dev/posts/security-advisory-cve--2026--105924-null-pointer-dereference-vulnerability-in-qcborvalue-to-json-co-cokdnkak3","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/security-advisory-cve--2026--105924-null-pointer-dereference-vulnerability-in-qcborvalue-to-json-co-cokdnkak3"},"datePublished":"2026-10-30T10:09:58.781Z","dateModified":"2026-10-30T10:10:19.585Z","description":"A NULL pointer dereference vulnerability, tracked as CVE-2026-105924, affects Qt Core's QCborValue to JSON conversion. The bug can crash applications,...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/0ba7e37aa06724863fcb985328eb4058?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/0ba7e37aa06724863fcb985328eb4058?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Qt","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Qt","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/fe6d7c1f4f824966befd58ee13f9de40","url":"https://daily.dev/sources/qt"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/security-advisory-cve--2026--105924-null-pointer-dereference-vulnerability-in-qcborvalue-to-json-co-cokdnkak3","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,cyber,qt","timeRequired":"PT1M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Qt","item":"https://daily.dev/sources/qt"},{"@type":"ListItem","position":3,"name":"Security advisory: CVE- 2026- 105924 NULL pointer dereference vulnerability in QCborValue to JSON conversion impacts Qt"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/security-advisory-cve--2026--105924-null-pointer-dereference-vulnerability-in-qcborvalue-to-json-co-cokdnkak3#faq","mainEntity":[{"@type":"Question","name":"How do I fix CVE-2026-105924 in Qt?","acceptedAnswer":{"@type":"Answer","text":"Update to Qt 6.8.10, 6.11.3, or 6.12.1, or apply the available patch. The vulnerability is a NULL pointer dereference in Qt Core's QCborValue to JSON conversion that can crash applications, causing a denial of service. Teams patching Qt against DoS bugs can track advisories like this one on daily.dev."}},{"@type":"Question","name":"What is CVE-2026-105924?","acceptedAnswer":{"@type":"Answer","text":"It is a NULL pointer dereference vulnerability in Qt Core's conversion of QCborValue to JSON, which can crash an application and cause a denial of service. Qt fixed it in versions 6.8.10, 6.11.3, and 6.12.1, with a patch also available for affected versions. Stay ahead of Qt vulnerabilities affecting production apps by following security advisories on daily.dev."}}]} ```