<!-- mobian-agent-page publisher="dailydev" canonical="https://daily.dev/posts/security-advisory-cve-2026-107590-out-of-bounds-write-vulnerability-in-qtextcodec-iconv-based-enco-gj5jrwyu9" -->

---
title: Security advisory: CVE-2026-107590: Out-of-bounds write...
description: A low-severity out-of-bounds write vulnerability affects Qt's QTextCodec when using iconv-based encoding. The issue is tracked as CVE-2026-107590. Developers...
canonical: https://daily.dev/posts/security-advisory-cve-2026-107590-out-of-bounds-write-vulnerability-in-qtextcodec-iconv-based-enco-gj5jrwyu9
twitter:card: summary_large_image
twitter:site: @dailydotdev
og:type: website
og:site_name: daily.dev
og:title: Security advisory: CVE-2026-107590: Out-of-bounds write vulnerability in QTextCodec iconv-based encoding impacts Qt | daily.dev
og:description: A low-severity out-of-bounds write vulnerability affects Qt's QTextCodec when using iconv-based encoding. The issue is tracked as CVE-2026-107590. Developers...
og:url: https://daily.dev/posts/security-advisory-cve-2026-107590-out-of-bounds-write-vulnerability-in-qtextcodec-iconv-based-enco-gj5jrwyu9
og:image: https://api.daily.dev/og/posts/gj5JrWYu9.png
og:image:alt: Security advisory: CVE-2026-107590: Out-of-bounds write vulnerability in QTextCodec iconv-based encoding impacts Qt
og:image:width: 1200
og:image:height: 630
og:locale: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Security advisory: CVE-2026-107590: Out-of-bounds write vulnerability in QTextCodec iconv-based encoding impacts Qt

**[Qt](https://daily.dev/sources/qt)** · 1 min read · 1 upvotes · 0 comments

## Summary

A low-severity out-of-bounds write vulnerability affects Qt's QTextCodec when using iconv-based encoding. The issue is tracked as CVE-2026-107590. Developers should update to Qt 6.8.9, 6.11.3, or 6.12.0, or apply the available patch to resolve it.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://www.qt.io/blog/security-advisory-cve-2026-107590>

## Questions this post answers

### What is CVE-2026-107590 in Qt and how do I fix it?

CVE-2026-107590 is a low-severity out-of-bounds write vulnerability in Qt's QTextCodec when using iconv-based encoding. It is fixed by updating to Qt version 6.8.9, 6.11.3, or 6.12.0, or by applying the available patch directly to affected codebases.

_Teams tracking Qt CVEs and patch versions can follow fixes like this one on daily.dev._

## Similar posts on daily.dev

- [Security advisory: CVE-2026-107472 Out-of-bounds read vulnerability in QTextCodec TSCII encoding impacts Qt An out-of-bounds read vulnerability in the Qt](https://daily.dev/posts/security-advisory-cve-2026-107472-out-of-bounds-read-vulnerability-in-qtextcodec-tscii-encoding-imp-ahfx9rght) · Qt · 0 upvotes · 0 comments
- [Security advisory: Out-of-bounds read vulnerability in QTextCodec::codecForName\(\) in Qt](https://daily.dev/posts/security-advisory-out-of-bounds-read-vulnerability-in-qtextcodec-codecforname-in-qt-fjd6gfyne) · Qt · 1 upvotes · 0 comments
- [Security advisory: CVE-2026-107157 Out-of-bounds read vulnerability in QCborValue::fromCbor\(\) impacts Qt Framework](https://daily.dev/posts/security-advisory-cve-2026-107157-out-of-bounds-read-vulnerability-in-qcborvalue-fromcbor-impact-sehtor5ev) · Qt · 0 upvotes · 0 comments
- [Security advisory: CVE-2026-105946 Out-of-bounds read vulnerability in NTLM authentication handling impacts Qt](https://daily.dev/posts/security-advisory-cve-2026-105946-out-of-bounds-read-vulnerability-in-ntlm-authentication-handling--fakikzvwv) · Qt · 1 upvotes · 0 comments
- [Security advisory: CVE-2026-101201 Out-of-bounds read vulnerability in JSON document parsing functionality impacts Qt Core and Qt 5 Core Compatibility APIs](https://daily.dev/posts/security-advisory-cve-2026-101201-out-of-bounds-read-vulnerability-in-json-document-parsing-functio-8qpkvlkym) · Qt · 0 upvotes · 0 comments

---

Tags: [#security](https://daily.dev/tags/security), [#qt](https://daily.dev/tags/qt)

[View this post on daily.dev](https://daily.dev/posts/security-advisory-cve-2026-107590-out-of-bounds-write-vulnerability-in-qtextcodec-iconv-based-enco-gj5jrwyu9)

```json
{"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]}
{"@context":"https://schema.org","@type":"TechArticle","headline":"Security advisory: CVE-2026-107590: Out-of-bounds write vulnerability in QTextCodec iconv-based encoding impacts Qt","url":"https://daily.dev/posts/security-advisory-cve-2026-107590-out-of-bounds-write-vulnerability-in-qtextcodec-iconv-based-enco-gj5jrwyu9","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/security-advisory-cve-2026-107590-out-of-bounds-write-vulnerability-in-qtextcodec-iconv-based-enco-gj5jrwyu9"},"datePublished":"2026-10-27T05:27:08.491Z","dateModified":"2026-10-27T05:27:41.555Z","description":"A low-severity out-of-bounds write vulnerability affects Qt's QTextCodec when using iconv-based encoding. The issue is tracked as CVE-2026-107590. Developers...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/0ba7e37aa06724863fcb985328eb4058?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/0ba7e37aa06724863fcb985328eb4058?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Qt","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Qt","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/fe6d7c1f4f824966befd58ee13f9de40","url":"https://daily.dev/sources/qt"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/security-advisory-cve-2026-107590-out-of-bounds-write-vulnerability-in-qtextcodec-iconv-based-enco-gj5jrwyu9","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,qt","timeRequired":"PT1M"}
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Qt","item":"https://daily.dev/sources/qt"},{"@type":"ListItem","position":3,"name":"Security advisory: CVE-2026-107590: Out-of-bounds write vulnerability in QTextCodec iconv-based encoding impacts Qt"}]}
{"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/security-advisory-cve-2026-107590-out-of-bounds-write-vulnerability-in-qtextcodec-iconv-based-enco-gj5jrwyu9#faq","mainEntity":[{"@type":"Question","name":"What is CVE-2026-107590 in Qt and how do I fix it?","acceptedAnswer":{"@type":"Answer","text":"CVE-2026-107590 is a low-severity out-of-bounds write vulnerability in Qt's QTextCodec when using iconv-based encoding. It is fixed by updating to Qt version 6.8.9, 6.11.3, or 6.12.0, or by applying the available patch directly to affected codebases. Teams tracking Qt CVEs and patch versions can follow fixes like this one on daily.dev."}}]}
```

