UBUNTU-CVE-2026-111487

Source
https://ubuntu.com/security/CVE-2026-111487
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111487.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2026-111487
Upstream
  • CVE-2026-111487
Published
2026-11-03T00:00:00Z
Modified
2026-11-04T03:30:23Z
Severity
  • 4.3 (Medium) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/R:U/RE:L/U:Amber CVSS Calculator
  • Ubuntu - medium
Summary
[none]
Details

An out-of-bounds write vulnerability in the Qt Framework assimp scene import plugin of the Qt3D module.

References

Affected packages

Ubuntu:16.04:LTS
qt3d-opensource-src

Package

Name
qt3d-opensource-src
Purl
pkg:deb/ubuntu/qt3d-opensource-src?arch=source&distro=xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.0~git20130731-0ubuntu12
5.5.1-4ubuntu2
5.5.1-4ubuntu3

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libqt53dcollision5",
            "binary_version": "5.5.1-4ubuntu3"
        },
        {
            "binary_name": "libqt53dcore5",
            "binary_version": "5.5.1-4ubuntu3"
        },
        {
            "binary_name": "libqt53dinput5",
            "binary_version": "5.5.1-4ubuntu3"
        },
        {
            "binary_name": "libqt53dlogic5",
            "binary_version": "5.5.1-4ubuntu3"
        },
        {
            "binary_name": "libqt53dquick5",
            "binary_version": "5.5.1-4ubuntu3"
        },
        {
            "binary_name": "libqt53dquickrenderer5",
            "binary_version": "5.5.1-4ubuntu3"
        },
        {
            "binary_name": "libqt53drenderer5",
            "binary_version": "5.5.1-4ubuntu3"
        },
        {
            "binary_name": "qml-module-qt3d",
            "binary_version": "5.5.1-4ubuntu3"
        },
        {
            "binary_name": "qml-module-qtquick-scene3d",
            "binary_version": "5.5.1-4ubuntu3"
        },
        {
            "binary_name": "qt3d-assimpsceneparser-plugin",
            "binary_version": "5.5.1-4ubuntu3"
        },
        {
            "binary_name": "qt3d-gltfsceneparser-plugin",
            "binary_version": "5.5.1-4ubuntu3"
        },
        {
            "binary_name": "qt3d5-doc-html",
            "binary_version": "5.5.1-4ubuntu3"
        },
        {
            "binary_name": "qt3d5-examples",
            "binary_version": "5.5.1-4ubuntu3"
        },
        {
            "binary_name": "qtdeclarative5-qt3d-plugin",
            "binary_version": "5.5.1-4ubuntu3"
        }
    ]
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111487.json"
Ubuntu:18.04:LTS
qt3d-opensource-src

Package

Name
qt3d-opensource-src
Purl
pkg:deb/ubuntu/qt3d-opensource-src?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.9.1+dfsg-3
5.9.2+dfsg-2build1
5.9.2+dfsg-3
5.9.3+dfsg-0ubuntu1
5.9.4+dfsg-0ubuntu2
5.9.5+dfsg-0ubuntu2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libqt53danimation5",
            "binary_version": "5.9.5+dfsg-0ubuntu2"
        },
        {
            "binary_name": "libqt53dcore5",
            "binary_version": "5.9.5+dfsg-0ubuntu2"
        },
        {
            "binary_name": "libqt53dextras5",
            "binary_version": "5.9.5+dfsg-0ubuntu2"
        },
        {
            "binary_name": "libqt53dinput5",
            "binary_version": "5.9.5+dfsg-0ubuntu2"
        },
        {
            "binary_name": "libqt53dlogic5",
            "binary_version": "5.9.5+dfsg-0ubuntu2"
        },
        {
            "binary_name": "libqt53dquick5",
            "binary_version": "5.9.5+dfsg-0ubuntu2"
        },
        {
            "binary_name": "libqt53dquickanimation5",
            "binary_version": "5.9.5+dfsg-0ubuntu2"
        },
        {
            "binary_name": "libqt53dquickextras5",
            "binary_version": "5.9.5+dfsg-0ubuntu2"
        },
        {
            "binary_name": "libqt53dquickinput5",
            "binary_version": "5.9.5+dfsg-0ubuntu2"
        },
        {
            "binary_name": "libqt53dquickrender5",
            "binary_version": "5.9.5+dfsg-0ubuntu2"
        },
        {
            "binary_name": "libqt53dquickscene2d5",
            "binary_version": "5.9.5+dfsg-0ubuntu2"
        },
        {
            "binary_name": "libqt53drender5",
            "binary_version": "5.9.5+dfsg-0ubuntu2"
        },
        {
            "binary_name": "qml-module-qt3d",
            "binary_version": "5.9.5+dfsg-0ubuntu2"
        },
        {
            "binary_name": "qml-module-qtquick-scene2d",
            "binary_version": "5.9.5+dfsg-0ubuntu2"
        },
        {
            "binary_name": "qml-module-qtquick-scene3d",
            "binary_version": "5.9.5+dfsg-0ubuntu2"
        },
        {
            "binary_name": "qt3d-assimpsceneimport-plugin",
            "binary_version": "5.9.5+dfsg-0ubuntu2"
        },
        {
            "binary_name": "qt3d-defaultgeometryloader-plugin",
            "binary_version": "5.9.5+dfsg-0ubuntu2"
        },
        {
            "binary_name": "qt3d-gltfsceneio-plugin",
            "binary_version": "5.9.5+dfsg-0ubuntu2"
        },
        {
            "binary_name": "qt3d-scene2d-plugin",
            "binary_version": "5.9.5+dfsg-0ubuntu2"
        },
        {
            "binary_name": "qt3d5-dev-tools",
            "binary_version": "5.9.5+dfsg-0ubuntu2"
        },
        {
            "binary_name": "qt3d5-doc-html",
            "binary_version": "5.9.5+dfsg-0ubuntu2"
        },
        {
            "binary_name": "qt3d5-examples",
            "binary_version": "5.9.5+dfsg-0ubuntu2"
        }
    ]
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111487.json"
Ubuntu:20.04:LTS
qt3d-opensource-src

Package

Name
qt3d-opensource-src
Purl
pkg:deb/ubuntu/qt3d-opensource-src?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.12.4+dfsg-1
5.12.5+dfsg-1
5.12.5+dfsg-1build1
5.12.5+dfsg-1build2
5.12.8+dfsg-0ubuntu1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libqt53danimation5",
            "binary_version": "5.12.8+dfsg-0ubuntu1"
        },
        {
            "binary_name": "libqt53dcore5",
            "binary_version": "5.12.8+dfsg-0ubuntu1"
        },
        {
            "binary_name": "libqt53dextras5",
            "binary_version": "5.12.8+dfsg-0ubuntu1"
        },
        {
            "binary_name": "libqt53dinput5",
            "binary_version": "5.12.8+dfsg-0ubuntu1"
        },
        {
            "binary_name": "libqt53dlogic5",
            "binary_version": "5.12.8+dfsg-0ubuntu1"
        },
        {
            "binary_name": "libqt53dquick5",
            "binary_version": "5.12.8+dfsg-0ubuntu1"
        },
        {
            "binary_name": "libqt53dquickanimation5",
            "binary_version": "5.12.8+dfsg-0ubuntu1"
        },
        {
            "binary_name": "libqt53dquickextras5",
            "binary_version": "5.12.8+dfsg-0ubuntu1"
        },
        {
            "binary_name": "libqt53dquickinput5",
            "binary_version": "5.12.8+dfsg-0ubuntu1"
        },
        {
            "binary_name": "libqt53dquickrender5",
            "binary_version": "5.12.8+dfsg-0ubuntu1"
        },
        {
            "binary_name": "libqt53dquickscene2d5",
            "binary_version": "5.12.8+dfsg-0ubuntu1"
        },
        {
            "binary_name": "libqt53drender5",
            "binary_version": "5.12.8+dfsg-0ubuntu1"
        },
        {
            "binary_name": "qml-module-qt3d",
            "binary_version": "5.12.8+dfsg-0ubuntu1"
        },
        {
            "binary_name": "qml-module-qtquick-scene2d",
            "binary_version": "5.12.8+dfsg-0ubuntu1"
        },
        {
            "binary_name": "qml-module-qtquick-scene3d",
            "binary_version": "5.12.8+dfsg-0ubuntu1"
        },
        {
            "binary_name": "qt3d-assimpsceneimport-plugin",
            "binary_version": "5.12.8+dfsg-0ubuntu1"
        },
        {
            "binary_name": "qt3d-defaultgeometryloader-plugin",
            "binary_version": "5.12.8+dfsg-0ubuntu1"
        },
        {
            "binary_name": "qt3d-gltfsceneio-plugin",
            "binary_version": "5.12.8+dfsg-0ubuntu1"
        },
        {
            "binary_name": "qt3d-scene2d-plugin",
            "binary_version": "5.12.8+dfsg-0ubuntu1"
        },
        {
            "binary_name": "qt3d5-dev-tools",
            "binary_version": "5.12.8+dfsg-0ubuntu1"
        },
        {
            "binary_name": "qt3d5-doc-html",
            "binary_version": "5.12.8+dfsg-0ubuntu1"
        },
        {
            "binary_name": "qt3d5-examples",
            "binary_version": "5.12.8+dfsg-0ubuntu1"
        }
    ]
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111487.json"
Ubuntu:22.04:LTS
qt3d-opensource-src

Package

Name
qt3d-opensource-src
Purl
pkg:deb/ubuntu/qt3d-opensource-src?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.2+dfsg-2
5.15.3+dfsg-1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libqt53danimation5",
            "binary_version": "5.15.3+dfsg-1"
        },
        {
            "binary_name": "libqt53dcore5",
            "binary_version": "5.15.3+dfsg-1"
        },
        {
            "binary_name": "libqt53dextras5",
            "binary_version": "5.15.3+dfsg-1"
        },
        {
            "binary_name": "libqt53dinput5",
            "binary_version": "5.15.3+dfsg-1"
        },
        {
            "binary_name": "libqt53dlogic5",
            "binary_version": "5.15.3+dfsg-1"
        },
        {
            "binary_name": "libqt53dquick5",
            "binary_version": "5.15.3+dfsg-1"
        },
        {
            "binary_name": "libqt53dquickanimation5",
            "binary_version": "5.15.3+dfsg-1"
        },
        {
            "binary_name": "libqt53dquickextras5",
            "binary_version": "5.15.3+dfsg-1"
        },
        {
            "binary_name": "libqt53dquickinput5",
            "binary_version": "5.15.3+dfsg-1"
        },
        {
            "binary_name": "libqt53dquickrender5",
            "binary_version": "5.15.3+dfsg-1"
        },
        {
            "binary_name": "libqt53dquickscene2d5",
            "binary_version": "5.15.3+dfsg-1"
        },
        {
            "binary_name": "libqt53drender5",
            "binary_version": "5.15.3+dfsg-1"
        },
        {
            "binary_name": "qml-module-qt3d",
            "binary_version": "5.15.3+dfsg-1"
        },
        {
            "binary_name": "qml-module-qtquick-scene2d",
            "binary_version": "5.15.3+dfsg-1"
        },
        {
            "binary_name": "qml-module-qtquick-scene3d",
            "binary_version": "5.15.3+dfsg-1"
        },
        {
            "binary_name": "qt3d-assimpsceneimport-plugin",
            "binary_version": "5.15.3+dfsg-1"
        },
        {
            "binary_name": "qt3d-defaultgeometryloader-plugin",
            "binary_version": "5.15.3+dfsg-1"
        },
        {
            "binary_name": "qt3d-gltfsceneio-plugin",
            "binary_version": "5.15.3+dfsg-1"
        },
        {
            "binary_name": "qt3d-scene2d-plugin",
            "binary_version": "5.15.3+dfsg-1"
        },
        {
            "binary_name": "qt3d5-dev-tools",
            "binary_version": "5.15.3+dfsg-1"
        },
        {
            "binary_name": "qt3d5-doc-html",
            "binary_version": "5.15.3+dfsg-1"
        },
        {
            "binary_name": "qt3d5-examples",
            "binary_version": "5.15.3+dfsg-1"
        }
    ]
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111487.json"
qt6-3d

Package

Name
qt6-3d
Purl
pkg:deb/ubuntu/qt6-3d?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.2.2+dfsg-3
6.2.4+dfsg-1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libqt63danimation6",
            "binary_version": "6.2.4+dfsg-1"
        },
        {
            "binary_name": "libqt63dcore6",
            "binary_version": "6.2.4+dfsg-1"
        },
        {
            "binary_name": "libqt63dextras6",
            "binary_version": "6.2.4+dfsg-1"
        },
        {
            "binary_name": "libqt63dinput6",
            "binary_version": "6.2.4+dfsg-1"
        },
        {
            "binary_name": "libqt63dlogic6",
            "binary_version": "6.2.4+dfsg-1"
        },
        {
            "binary_name": "libqt63dquick6",
            "binary_version": "6.2.4+dfsg-1"
        },
        {
            "binary_name": "libqt63dquickanimation6",
            "binary_version": "6.2.4+dfsg-1"
        },
        {
            "binary_name": "libqt63dquickextras6",
            "binary_version": "6.2.4+dfsg-1"
        },
        {
            "binary_name": "libqt63dquickinput6",
            "binary_version": "6.2.4+dfsg-1"
        },
        {
            "binary_name": "libqt63dquickrender6",
            "binary_version": "6.2.4+dfsg-1"
        },
        {
            "binary_name": "libqt63dquickscene2d6",
            "binary_version": "6.2.4+dfsg-1"
        },
        {
            "binary_name": "libqt63drender6",
            "binary_version": "6.2.4+dfsg-1"
        },
        {
            "binary_name": "qml6-module-qt3d-animation",
            "binary_version": "6.2.4+dfsg-1"
        },
        {
            "binary_name": "qml6-module-qt3d-core",
            "binary_version": "6.2.4+dfsg-1"
        },
        {
            "binary_name": "qml6-module-qt3d-extras",
            "binary_version": "6.2.4+dfsg-1"
        },
        {
            "binary_name": "qml6-module-qt3d-input",
            "binary_version": "6.2.4+dfsg-1"
        },
        {
            "binary_name": "qml6-module-qt3d-logic",
            "binary_version": "6.2.4+dfsg-1"
        },
        {
            "binary_name": "qml6-module-qt3d-render",
            "binary_version": "6.2.4+dfsg-1"
        },
        {
            "binary_name": "qml6-module-qtquick-scene2d",
            "binary_version": "6.2.4+dfsg-1"
        },
        {
            "binary_name": "qml6-module-qtquick-scene3d",
            "binary_version": "6.2.4+dfsg-1"
        },
        {
            "binary_name": "qt6-3d-assimpsceneimport-plugin",
            "binary_version": "6.2.4+dfsg-1"
        },
        {
            "binary_name": "qt6-3d-defaultgeometryloader-plugin",
            "binary_version": "6.2.4+dfsg-1"
        },
        {
            "binary_name": "qt6-3d-gltfsceneio-plugin",
            "binary_version": "6.2.4+dfsg-1"
        },
        {
            "binary_name": "qt6-3d-scene2d-plugin",
            "binary_version": "6.2.4+dfsg-1"
        }
    ]
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111487.json"
Ubuntu:24.04:LTS
qt3d-opensource-src

Package

Name
qt3d-opensource-src
Purl
pkg:deb/ubuntu/qt3d-opensource-src?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.10+dfsg-2
5.15.12+dfsg-1
5.15.12+dfsg-1build1
5.15.12+dfsg-1build2
5.15.13+dfsg-1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libqt53danimation5",
            "binary_version": "5.15.13+dfsg-1"
        },
        {
            "binary_name": "libqt53dcore5",
            "binary_version": "5.15.13+dfsg-1"
        },
        {
            "binary_name": "libqt53dextras5",
            "binary_version": "5.15.13+dfsg-1"
        },
        {
            "binary_name": "libqt53dinput5",
            "binary_version": "5.15.13+dfsg-1"
        },
        {
            "binary_name": "libqt53dlogic5",
            "binary_version": "5.15.13+dfsg-1"
        },
        {
            "binary_name": "libqt53dquick5",
            "binary_version": "5.15.13+dfsg-1"
        },
        {
            "binary_name": "libqt53dquickanimation5",
            "binary_version": "5.15.13+dfsg-1"
        },
        {
            "binary_name": "libqt53dquickextras5",
            "binary_version": "5.15.13+dfsg-1"
        },
        {
            "binary_name": "libqt53dquickinput5",
            "binary_version": "5.15.13+dfsg-1"
        },
        {
            "binary_name": "libqt53dquickrender5",
            "binary_version": "5.15.13+dfsg-1"
        },
        {
            "binary_name": "libqt53dquickscene2d5",
            "binary_version": "5.15.13+dfsg-1"
        },
        {
            "binary_name": "libqt53drender5",
            "binary_version": "5.15.13+dfsg-1"
        },
        {
            "binary_name": "qml-module-qt3d",
            "binary_version": "5.15.13+dfsg-1"
        },
        {
            "binary_name": "qml-module-qtquick-scene2d",
            "binary_version": "5.15.13+dfsg-1"
        },
        {
            "binary_name": "qml-module-qtquick-scene3d",
            "binary_version": "5.15.13+dfsg-1"
        },
        {
            "binary_name": "qt3d-assimpsceneimport-plugin",
            "binary_version": "5.15.13+dfsg-1"
        },
        {
            "binary_name": "qt3d-defaultgeometryloader-plugin",
            "binary_version": "5.15.13+dfsg-1"
        },
        {
            "binary_name": "qt3d-gltfsceneio-plugin",
            "binary_version": "5.15.13+dfsg-1"
        },
        {
            "binary_name": "qt3d-scene2d-plugin",
            "binary_version": "5.15.13+dfsg-1"
        },
        {
            "binary_name": "qt3d5-dev-tools",
            "binary_version": "5.15.13+dfsg-1"
        },
        {
            "binary_name": "qt3d5-doc-html",
            "binary_version": "5.15.13+dfsg-1"
        },
        {
            "binary_name": "qt3d5-examples",
            "binary_version": "5.15.13+dfsg-1"
        }
    ]
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111487.json"
qt6-3d

Package

Name
qt6-3d
Purl
pkg:deb/ubuntu/qt6-3d?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.4.2+dfsg-6
6.4.2+dfsg-6build1
6.4.2+dfsg-6build2
6.4.2+dfsg-6build3

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libqt63danimation6",
            "binary_version": "6.4.2+dfsg-6build3"
        },
        {
            "binary_name": "libqt63dcore6",
            "binary_version": "6.4.2+dfsg-6build3"
        },
        {
            "binary_name": "libqt63dextras6",
            "binary_version": "6.4.2+dfsg-6build3"
        },
        {
            "binary_name": "libqt63dinput6",
            "binary_version": "6.4.2+dfsg-6build3"
        },
        {
            "binary_name": "libqt63dlogic6",
            "binary_version": "6.4.2+dfsg-6build3"
        },
        {
            "binary_name": "libqt63dquick6",
            "binary_version": "6.4.2+dfsg-6build3"
        },
        {
            "binary_name": "libqt63dquickanimation6",
            "binary_version": "6.4.2+dfsg-6build3"
        },
        {
            "binary_name": "libqt63dquickextras6",
            "binary_version": "6.4.2+dfsg-6build3"
        },
        {
            "binary_name": "libqt63dquickinput6",
            "binary_version": "6.4.2+dfsg-6build3"
        },
        {
            "binary_name": "libqt63dquickrender6",
            "binary_version": "6.4.2+dfsg-6build3"
        },
        {
            "binary_name": "libqt63dquickscene2d6",
            "binary_version": "6.4.2+dfsg-6build3"
        },
        {
            "binary_name": "libqt63drender6",
            "binary_version": "6.4.2+dfsg-6build3"
        },
        {
            "binary_name": "qml6-module-qt3d-animation",
            "binary_version": "6.4.2+dfsg-6build3"
        },
        {
            "binary_name": "qml6-module-qt3d-core",
            "binary_version": "6.4.2+dfsg-6build3"
        },
        {
            "binary_name": "qml6-module-qt3d-extras",
            "binary_version": "6.4.2+dfsg-6build3"
        },
        {
            "binary_name": "qml6-module-qt3d-input",
            "binary_version": "6.4.2+dfsg-6build3"
        },
        {
            "binary_name": "qml6-module-qt3d-logic",
            "binary_version": "6.4.2+dfsg-6build3"
        },
        {
            "binary_name": "qml6-module-qt3d-render",
            "binary_version": "6.4.2+dfsg-6build3"
        },
        {
            "binary_name": "qml6-module-qtquick-scene2d",
            "binary_version": "6.4.2+dfsg-6build3"
        },
        {
            "binary_name": "qml6-module-qtquick-scene3d",
            "binary_version": "6.4.2+dfsg-6build3"
        },
        {
            "binary_name": "qt6-3d-assimpsceneimport-plugin",
            "binary_version": "6.4.2+dfsg-6build3"
        },
        {
            "binary_name": "qt6-3d-defaultgeometryloader-plugin",
            "binary_version": "6.4.2+dfsg-6build3"
        },
        {
            "binary_name": "qt6-3d-doc-html",
            "binary_version": "6.4.2+dfsg-6build3"
        },
        {
            "binary_name": "qt6-3d-examples",
            "binary_version": "6.4.2+dfsg-6build3"
        },
        {
            "binary_name": "qt6-3d-gltfsceneio-plugin",
            "binary_version": "6.4.2+dfsg-6build3"
        },
        {
            "binary_name": "qt6-3d-scene2d-plugin",
            "binary_version": "6.4.2+dfsg-6build3"
        }
    ]
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111487.json"
Ubuntu:26.04:LTS
qt3d-opensource-src

Package

Name
qt3d-opensource-src
Purl
pkg:deb/ubuntu/qt3d-opensource-src?arch=source&distro=resolute

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.17+dfsg-1
5.15.17+dfsg-2build1
5.15.18+dfsg-1
5.15.18+dfsg-1ubuntu1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libqt53danimation5",
            "binary_version": "5.15.18+dfsg-1ubuntu1"
        },
        {
            "binary_name": "libqt53dcore5",
            "binary_version": "5.15.18+dfsg-1ubuntu1"
        },
        {
            "binary_name": "libqt53dextras5",
            "binary_version": "5.15.18+dfsg-1ubuntu1"
        },
        {
            "binary_name": "libqt53dinput5",
            "binary_version": "5.15.18+dfsg-1ubuntu1"
        },
        {
            "binary_name": "libqt53dlogic5",
            "binary_version": "5.15.18+dfsg-1ubuntu1"
        },
        {
            "binary_name": "libqt53dquick5",
            "binary_version": "5.15.18+dfsg-1ubuntu1"
        },
        {
            "binary_name": "libqt53dquickanimation5",
            "binary_version": "5.15.18+dfsg-1ubuntu1"
        },
        {
            "binary_name": "libqt53dquickextras5",
            "binary_version": "5.15.18+dfsg-1ubuntu1"
        },
        {
            "binary_name": "libqt53dquickinput5",
            "binary_version": "5.15.18+dfsg-1ubuntu1"
        },
        {
            "binary_name": "libqt53dquickrender5",
            "binary_version": "5.15.18+dfsg-1ubuntu1"
        },
        {
            "binary_name": "libqt53dquickscene2d5",
            "binary_version": "5.15.18+dfsg-1ubuntu1"
        },
        {
            "binary_name": "libqt53drender5",
            "binary_version": "5.15.18+dfsg-1ubuntu1"
        },
        {
            "binary_name": "qml-module-qt3d",
            "binary_version": "5.15.18+dfsg-1ubuntu1"
        },
        {
            "binary_name": "qml-module-qtquick-scene2d",
            "binary_version": "5.15.18+dfsg-1ubuntu1"
        },
        {
            "binary_name": "qml-module-qtquick-scene3d",
            "binary_version": "5.15.18+dfsg-1ubuntu1"
        },
        {
            "binary_name": "qt3d-assimpsceneimport-plugin",
            "binary_version": "5.15.18+dfsg-1ubuntu1"
        },
        {
            "binary_name": "qt3d-defaultgeometryloader-plugin",
            "binary_version": "5.15.18+dfsg-1ubuntu1"
        },
        {
            "binary_name": "qt3d-gltfsceneio-plugin",
            "binary_version": "5.15.18+dfsg-1ubuntu1"
        },
        {
            "binary_name": "qt3d-scene2d-plugin",
            "binary_version": "5.15.18+dfsg-1ubuntu1"
        },
        {
            "binary_name": "qt3d5-dev-tools",
            "binary_version": "5.15.18+dfsg-1ubuntu1"
        },
        {
            "binary_name": "qt3d5-doc-html",
            "binary_version": "5.15.18+dfsg-1ubuntu1"
        },
        {
            "binary_name": "qt3d5-examples",
            "binary_version": "5.15.18+dfsg-1ubuntu1"
        }
    ]
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111487.json"
qt6-3d

Package

Name
qt6-3d
Purl
pkg:deb/ubuntu/qt6-3d?arch=source&distro=resolute

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.9.2+dfsg-1
6.9.2+dfsg-1build1
6.10.2+dfsg-1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libqt63danimation6",
            "binary_version": "6.10.2+dfsg-1"
        },
        {
            "binary_name": "libqt63dcore6",
            "binary_version": "6.10.2+dfsg-1"
        },
        {
            "binary_name": "libqt63dextras6",
            "binary_version": "6.10.2+dfsg-1"
        },
        {
            "binary_name": "libqt63dinput6",
            "binary_version": "6.10.2+dfsg-1"
        },
        {
            "binary_name": "libqt63dlogic6",
            "binary_version": "6.10.2+dfsg-1"
        },
        {
            "binary_name": "libqt63dquick6",
            "binary_version": "6.10.2+dfsg-1"
        },
        {
            "binary_name": "libqt63dquickextras6",
            "binary_version": "6.10.2+dfsg-1"
        },
        {
            "binary_name": "libqt63dquickscene2d6",
            "binary_version": "6.10.2+dfsg-1"
        },
        {
            "binary_name": "libqt63dquickscene3d6",
            "binary_version": "6.10.2+dfsg-1"
        },
        {
            "binary_name": "libqt63drender6",
            "binary_version": "6.10.2+dfsg-1"
        },
        {
            "binary_name": "qml6-module-qt3d-animation",
            "binary_version": "6.10.2+dfsg-1"
        },
        {
            "binary_name": "qml6-module-qt3d-core",
            "binary_version": "6.10.2+dfsg-1"
        },
        {
            "binary_name": "qml6-module-qt3d-extras",
            "binary_version": "6.10.2+dfsg-1"
        },
        {
            "binary_name": "qml6-module-qt3d-input",
            "binary_version": "6.10.2+dfsg-1"
        },
        {
            "binary_name": "qml6-module-qt3d-logic",
            "binary_version": "6.10.2+dfsg-1"
        },
        {
            "binary_name": "qml6-module-qt3d-render",
            "binary_version": "6.10.2+dfsg-1"
        },
        {
            "binary_name": "qml6-module-qtquick-scene2d",
            "binary_version": "6.10.2+dfsg-1"
        },
        {
            "binary_name": "qml6-module-qtquick-scene3d",
            "binary_version": "6.10.2+dfsg-1"
        },
        {
            "binary_name": "qt6-3d-assimpsceneimport-plugin",
            "binary_version": "6.10.2+dfsg-1"
        },
        {
            "binary_name": "qt6-3d-defaultgeometryloader-plugin",
            "binary_version": "6.10.2+dfsg-1"
        },
        {
            "binary_name": "qt6-3d-doc-html",
            "binary_version": "6.10.2+dfsg-1"
        },
        {
            "binary_name": "qt6-3d-examples",
            "binary_version": "6.10.2+dfsg-1"
        },
        {
            "binary_name": "qt6-3d-gltfsceneio-plugin",
            "binary_version": "6.10.2+dfsg-1"
        },
        {
            "binary_name": "qt6-3d-scene2d-plugin",
            "binary_version": "6.10.2+dfsg-1"
        }
    ]
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111487.json"
Ubuntu:26.10
qt3d-opensource-src

Package

Name
qt3d-opensource-src
Purl
pkg:deb/ubuntu/qt3d-opensource-src?arch=source&distro=stonking

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.18+dfsg-1ubuntu1
5.15.19+dfsg-2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libqt53danimation5",
            "binary_version": "5.15.19+dfsg-2"
        },
        {
            "binary_name": "libqt53dcore5",
            "binary_version": "5.15.19+dfsg-2"
        },
        {
            "binary_name": "libqt53dextras5",
            "binary_version": "5.15.19+dfsg-2"
        },
        {
            "binary_name": "libqt53dinput5",
            "binary_version": "5.15.19+dfsg-2"
        },
        {
            "binary_name": "libqt53dlogic5",
            "binary_version": "5.15.19+dfsg-2"
        },
        {
            "binary_name": "libqt53dquick5",
            "binary_version": "5.15.19+dfsg-2"
        },
        {
            "binary_name": "libqt53dquickanimation5",
            "binary_version": "5.15.19+dfsg-2"
        },
        {
            "binary_name": "libqt53dquickextras5",
            "binary_version": "5.15.19+dfsg-2"
        },
        {
            "binary_name": "libqt53dquickinput5",
            "binary_version": "5.15.19+dfsg-2"
        },
        {
            "binary_name": "libqt53dquickrender5",
            "binary_version": "5.15.19+dfsg-2"
        },
        {
            "binary_name": "libqt53dquickscene2d5",
            "binary_version": "5.15.19+dfsg-2"
        },
        {
            "binary_name": "libqt53drender5",
            "binary_version": "5.15.19+dfsg-2"
        },
        {
            "binary_name": "qml-module-qt3d",
            "binary_version": "5.15.19+dfsg-2"
        },
        {
            "binary_name": "qml-module-qtquick-scene2d",
            "binary_version": "5.15.19+dfsg-2"
        },
        {
            "binary_name": "qml-module-qtquick-scene3d",
            "binary_version": "5.15.19+dfsg-2"
        },
        {
            "binary_name": "qt3d-assimpsceneimport-plugin",
            "binary_version": "5.15.19+dfsg-2"
        },
        {
            "binary_name": "qt3d-defaultgeometryloader-plugin",
            "binary_version": "5.15.19+dfsg-2"
        },
        {
            "binary_name": "qt3d-gltfsceneio-plugin",
            "binary_version": "5.15.19+dfsg-2"
        },
        {
            "binary_name": "qt3d-scene2d-plugin",
            "binary_version": "5.15.19+dfsg-2"
        },
        {
            "binary_name": "qt3d5-dev-tools",
            "binary_version": "5.15.19+dfsg-2"
        },
        {
            "binary_name": "qt3d5-doc-html",
            "binary_version": "5.15.19+dfsg-2"
        },
        {
            "binary_name": "qt3d5-examples",
            "binary_version": "5.15.19+dfsg-2"
        }
    ]
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111487.json"
qt6-3d

Package

Name
qt6-3d
Purl
pkg:deb/ubuntu/qt6-3d?arch=source&distro=stonking

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.10.2+dfsg-1
6.10.2+dfsg-3
6.11.2+dfsg-1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libqt63danimation6",
            "binary_version": "6.11.2+dfsg-1"
        },
        {
            "binary_name": "libqt63dcore6",
            "binary_version": "6.11.2+dfsg-1"
        },
        {
            "binary_name": "libqt63dextras6",
            "binary_version": "6.11.2+dfsg-1"
        },
        {
            "binary_name": "libqt63dinput6",
            "binary_version": "6.11.2+dfsg-1"
        },
        {
            "binary_name": "libqt63dlogic6",
            "binary_version": "6.11.2+dfsg-1"
        },
        {
            "binary_name": "libqt63dquick6",
            "binary_version": "6.11.2+dfsg-1"
        },
        {
            "binary_name": "libqt63dquickextras6",
            "binary_version": "6.11.2+dfsg-1"
        },
        {
            "binary_name": "libqt63dquickscene2d6",
            "binary_version": "6.11.2+dfsg-1"
        },
        {
            "binary_name": "libqt63dquickscene3d6",
            "binary_version": "6.11.2+dfsg-1"
        },
        {
            "binary_name": "libqt63drender6",
            "binary_version": "6.11.2+dfsg-1"
        },
        {
            "binary_name": "qml6-module-qt3d-animation",
            "binary_version": "6.11.2+dfsg-1"
        },
        {
            "binary_name": "qml6-module-qt3d-core",
            "binary_version": "6.11.2+dfsg-1"
        },
        {
            "binary_name": "qml6-module-qt3d-extras",
            "binary_version": "6.11.2+dfsg-1"
        },
        {
            "binary_name": "qml6-module-qt3d-input",
            "binary_version": "6.11.2+dfsg-1"
        },
        {
            "binary_name": "qml6-module-qt3d-logic",
            "binary_version": "6.11.2+dfsg-1"
        },
        {
            "binary_name": "qml6-module-qt3d-render",
            "binary_version": "6.11.2+dfsg-1"
        },
        {
            "binary_name": "qml6-module-qtquick-scene2d",
            "binary_version": "6.11.2+dfsg-1"
        },
        {
            "binary_name": "qml6-module-qtquick-scene3d",
            "binary_version": "6.11.2+dfsg-1"
        },
        {
            "binary_name": "qt6-3d-assimpsceneimport-plugin",
            "binary_version": "6.11.2+dfsg-1"
        },
        {
            "binary_name": "qt6-3d-defaultgeometryloader-plugin",
            "binary_version": "6.11.2+dfsg-1"
        },
        {
            "binary_name": "qt6-3d-doc-html",
            "binary_version": "6.11.2+dfsg-1"
        },
        {
            "binary_name": "qt6-3d-examples",
            "binary_version": "6.11.2+dfsg-1"
        },
        {
            "binary_name": "qt6-3d-gltfsceneio-plugin",
            "binary_version": "6.11.2+dfsg-1"
        },
        {
            "binary_name": "qt6-3d-scene2d-plugin",
            "binary_version": "6.11.2+dfsg-1"
        }
    ]
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111487.json"