--- title: Security advisory: CVE-2026-107157 Out-of-bounds read... description: An out-of-bounds read vulnerability, tracked as CVE-2026-107157, affects QCborValue::fromCbor() in Qt Core. The flaw may crash applications. Update to Qt... canonical: https://daily.dev/posts/security-advisory-cve-2026-107157-out-of-bounds-read-vulnerability-in-qcborvalue-fromcbor-impact-sehtor5ev twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Security advisory: CVE-2026-107157 Out-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt Framework | daily.dev og:description: An out-of-bounds read vulnerability, tracked as CVE-2026-107157, affects QCborValue::fromCbor() in Qt Core. The flaw may crash applications. Update to Qt... og:url: https://daily.dev/posts/security-advisory-cve-2026-107157-out-of-bounds-read-vulnerability-in-qcborvalue-fromcbor-impact-sehtor5ev og:image: https://api.daily.dev/og/posts/SeHtOR5ev.png og:image:alt: Security advisory: CVE-2026-107157 Out-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt Framework og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Security advisory: CVE-2026-107157 Out-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt Framework **[Qt](https://daily.dev/sources/qt)** · 1 min read · 0 upvotes · 0 comments ## Summary An out-of-bounds read vulnerability, tracked as CVE-2026-107157, affects QCborValue::fromCbor() in Qt Core. The flaw may crash applications. Update to Qt 6.8.9, 6.11.3, or 6.12.0, or patch. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What is CVE-2026-107157 in Qt and how do I fix it? CVE-2026-107157 is an out-of-bounds read vulnerability in QCborValue::fromCbor() within Qt Core that may cause applications parsing CBOR data to crash. It is fixed by updating to Qt 6.8.9, 6.11.3, or 6.12.0, or by applying the available patch for the vulnerable function. _Teams tracking Qt CVEs and patch versions can follow advisories like this one on daily.dev._ ## Similar posts on daily.dev - [Security advisory: Out-of-bounds read vulnerability in QTextCodec::codecForName\(\) in Qt](https://daily.dev/posts/security-advisory-out-of-bounds-read-vulnerability-in-qtextcodec-codecforname-in-qt-fjd6gfyne) · Qt · 1 upvotes · 0 comments - [Security advisory: CVE-2026-101201 Out-of-bounds read vulnerability in JSON document parsing functionality impacts Qt Core and Qt 5 Core Compatibility APIs](https://daily.dev/posts/security-advisory-cve-2026-101201-out-of-bounds-read-vulnerability-in-json-document-parsing-functio-8qpkvlkym) · Qt · 0 upvotes · 0 comments - [Security advisory: CVE-2026-13326 Out-of-bounds read and integer underflow vulnerability in QNdefNfcTextRecord impacts Qt NFC module.](https://daily.dev/posts/security-advisory-cve-2026-13326-out-of-bounds-read-and-integer-underflow-vulnerability-in-qndefnfc-ghlpmanok) · Qt · 0 upvotes · 0 comments - [Security advisory: CVE-2026-76151 out-of-bounds read \(buffer over-read\) vulnerability in HTTP Cache-Control response header parsing impacts Qt Framework \(QtNetwork module\)](https://daily.dev/posts/security-advisory-cve-2026-76151-out-of-bounds-read-buffer-over-read-vulnerability-in-http-cache--cgm6o5b0s) · Qt · 0 upvotes · 0 comments - [Security advisory: CVE-2026-96432 - Null pointer dereference vulnerability in QNetworkAccessManager impacts Qt](https://daily.dev/posts/security-advisory-cve-2026-96432---null-pointer-dereference-vulnerability-in-qnetworkaccessmanager--zmilvwptr) · Qt · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#qt](https://daily.dev/tags/qt) [View this post on daily.dev](https://daily.dev/posts/security-advisory-cve-2026-107157-out-of-bounds-read-vulnerability-in-qcborvalue-fromcbor-impact-sehtor5ev) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Security advisory: CVE-2026-107157 Out-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt Framework","url":"https://daily.dev/posts/security-advisory-cve-2026-107157-out-of-bounds-read-vulnerability-in-qcborvalue-fromcbor-impact-sehtor5ev","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/security-advisory-cve-2026-107157-out-of-bounds-read-vulnerability-in-qcborvalue-fromcbor-impact-sehtor5ev"},"datePublished":"2026-10-26T11:12:34.267Z","dateModified":"2026-10-26T11:13:26.569Z","description":"An out-of-bounds read vulnerability, tracked as CVE-2026-107157, affects QCborValue::fromCbor() in Qt Core. The flaw may crash applications. Update to Qt...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/0ba7e37aa06724863fcb985328eb4058?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/0ba7e37aa06724863fcb985328eb4058?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Qt","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Qt","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/fe6d7c1f4f824966befd58ee13f9de40","url":"https://daily.dev/sources/qt"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/security-advisory-cve-2026-107157-out-of-bounds-read-vulnerability-in-qcborvalue-fromcbor-impact-sehtor5ev","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,qt","timeRequired":"PT1M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Qt","item":"https://daily.dev/sources/qt"},{"@type":"ListItem","position":3,"name":"Security advisory: CVE-2026-107157 Out-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt Framework"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/security-advisory-cve-2026-107157-out-of-bounds-read-vulnerability-in-qcborvalue-fromcbor-impact-sehtor5ev#faq","mainEntity":[{"@type":"Question","name":"What is CVE-2026-107157 in Qt and how do I fix it?","acceptedAnswer":{"@type":"Answer","text":"CVE-2026-107157 is an out-of-bounds read vulnerability in QCborValue::fromCbor() within Qt Core that may cause applications parsing CBOR data to crash. It is fixed by updating to Qt 6.8.9, 6.11.3, or 6.12.0, or by applying the available patch for the vulnerable function. Teams tracking Qt CVEs and patch versions can follow advisories like this one on daily.dev."}}]} ```