OESA-2026-4797
- Source
- https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-4797
- Import Source
- https://repo.openeuler.org/security/data/osv/OESA-2026-4797.json
- JSON Data
- https://api.osv.dev/v1/vulns/OESA-2026-4797
- Upstream
- CVE-2026-11573
- Published
- 2026-11-11T12:26:15Z
- Modified
- 2026-11-11T12:45:07Z
- Severity
-
- 7.1 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X CVSS Calculator
- Summary
- qt security update
- Details
-
Qt (pronounced as "cute", not "cu-tee") is a cross-platform framework that is usually used as a graphical toolkit, although it is also very helpful in creating CLI applications. It runs on the three major desktop OSes, as well as on mobile OSes, such as Symbian, Nokia Belle, Meego Harmattan, MeeGo or BB10, and on embedded devices. Ports for Android (Necessitas) and iOS are also in development
Security Fix(es):
Uncontrolled recursion in Qt's QDomDocument serialization (QtXml) lets deeply nested untrusted XML crash the app via stack exhaustion (DoS only).(CVE-2026-11573)
- Database specific
{ "severity": "High" }- References
Affected packages
openEuler:22.03-LTS-SP4 / qt
Package
- Name
- qt
- Purl
- pkg:rpm/openEuler/qt&distro=openEuler-22.03-LTS-SP4
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed4.8.7-60.oe2203sp4
Ecosystem specific
{
"aarch64": [
"qt-4.8.7-60.oe2203sp4.aarch64.rpm",
"qt-debuginfo-4.8.7-60.oe2203sp4.aarch64.rpm",
"qt-debugsource-4.8.7-60.oe2203sp4.aarch64.rpm",
"qt-devel-4.8.7-60.oe2203sp4.aarch64.rpm"
],
"src": [
"qt-4.8.7-60.oe2203sp4.src.rpm"
],
"x86_64": [
"qt-4.8.7-60.oe2203sp4.x86_64.rpm",
"qt-debuginfo-4.8.7-60.oe2203sp4.x86_64.rpm",
"qt-debugsource-4.8.7-60.oe2203sp4.x86_64.rpm",
"qt-devel-4.8.7-60.oe2203sp4.x86_64.rpm"
]
}