CVE-2026-101201
Publication date 20 October 2026
Last updated 28 October 2026
Ubuntu priority
Description
A malformed header in the binary file fed to QBinaryJson::fromBinaryData() can cause undefined behaviour because of out-of-bounds read.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| qtbase-opensource-src-gles | 26.10 stonking |
Needs evaluation
|
| 26.04 LTS resolute |
Needs evaluation
|
|
| 24.04 LTS noble |
Needs evaluation
|
|
| 22.04 LTS jammy |
Needs evaluation
|
|
| 20.04 LTS focal |
Needs evaluation
|
|
| 16.04 LTS xenial |
Needs evaluation
|
Severity score breakdown
CVSS version: CVSS v4.0
Base score
4.3 · Medium
Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/R:U/RE:L/U:Amber
References
Other references
- https://www.cve.org/CVERecord?id=CVE-2026-101201
- https://github.com/qt/qt5compat/commit/721ed576391211ca53ecdaaecf6dd41df7bc962e
- https://github.com/qt/qt5compat/commit/c0a495894d83a3c48055bd1e544f93147fc6ade1
- https://wiki.qt.io/list_of_known_vulnerabilities_in_qt_products#cve-2026-101201
- https://advisory.echohq.com/cve/cve-2026-101201