AZL-112181

See a problem?
Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-112181.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-112181
Upstream
  • CVE-2026-105946
Published
2026-10-27T07:16:31Z
Modified
2026-11-03T05:33:06Z
Summary
CVE-2026-105946 affecting package qtbase 6.6.3-7
Details

Out-of-bounds read in the QAuthenticator NTLM authentication handling in the Qt Network module in Qt Group Qt allows remote attackers to obtain sensitive information (heap memory contents) or cause a denial of service (application crash) via a crafted NTLM challenge sent by a malicious server or proxy, when an application using QNetworkAccessManager or QTcpSocket authenticates with NTLM.

References

Affected packages

Azure Linux:3 / qtbase

Package

Name
qtbase
Purl
pkg:rpm/azure-linux/qtbase

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Last Affected
6.6.3-7

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-112181.json"