UBUNTU-CVE-2026-96432

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2026-96432

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-96432.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2026-96432

Upstream

CVE-2026-96432

Published

2026-10-26T12:17:00Z

Modified

2026-10-28T20:15:52Z

Severity

2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/RE:L/U:Green CVSS Calculator
2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/RE:L/U:Green CVSS Calculator
Ubuntu - medium

Summary

[none]

Details

A malicious or compromised HTTP/2 server withholding SETTINGS ACK can send RST_STREAM on a completed stream, planting a null pointer, and then send a PUSH_PROMISE for that stream, causing a null pointer dereference in the QNetworkAccessManager class of the Qt Network module that crashes the application.

References

Affected packages

Ubuntu:22.04:LTS / qt6-base

Package

Name: qt6-base
Purl: pkg:deb/ubuntu/qt6-base?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.2.2+dfsg-5ubuntu1

6.2.2+dfsg-6ubuntu1

6.2.2+dfsg-6ubuntu2

6.2.4+dfsg-1ubuntu1

6.2.4+dfsg-2ubuntu1

6.2.4+dfsg-2ubuntu1.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "libqt6concurrent6",
            "binary_version":  "6.2.4+dfsg-2ubuntu1.1"
        },
        {
            "binary_name":  "libqt6core6",
            "binary_version":  "6.2.4+dfsg-2ubuntu1.1"
        },
        {
            "binary_name":  "libqt6dbus6",
            "binary_version":  "6.2.4+dfsg-2ubuntu1.1"
        },
        {
            "binary_name":  "libqt6gui6",
            "binary_version":  "6.2.4+dfsg-2ubuntu1.1"
        },
        {
            "binary_name":  "libqt6network6",
            "binary_version":  "6.2.4+dfsg-2ubuntu1.1"
        },
        {
            "binary_name":  "libqt6opengl6",
            "binary_version":  "6.2.4+dfsg-2ubuntu1.1"
        },
        {
            "binary_name":  "libqt6openglwidgets6",
            "binary_version":  "6.2.4+dfsg-2ubuntu1.1"
        },
        {
            "binary_name":  "libqt6printsupport6",
            "binary_version":  "6.2.4+dfsg-2ubuntu1.1"
        },
        {
            "binary_name":  "libqt6sql6",
            "binary_version":  "6.2.4+dfsg-2ubuntu1.1"
        },
        {
            "binary_name":  "libqt6sql6-ibase",
            "binary_version":  "6.2.4+dfsg-2ubuntu1.1"
        },
        {
            "binary_name":  "libqt6sql6-mysql",
            "binary_version":  "6.2.4+dfsg-2ubuntu1.1"
        },
        {
            "binary_name":  "libqt6sql6-odbc",
            "binary_version":  "6.2.4+dfsg-2ubuntu1.1"
        },
        {
            "binary_name":  "libqt6sql6-psql",
            "binary_version":  "6.2.4+dfsg-2ubuntu1.1"
        },
        {
            "binary_name":  "libqt6sql6-sqlite",
            "binary_version":  "6.2.4+dfsg-2ubuntu1.1"
        },
        {
            "binary_name":  "libqt6test6",
            "binary_version":  "6.2.4+dfsg-2ubuntu1.1"
        },
        {
            "binary_name":  "libqt6widgets6",
            "binary_version":  "6.2.4+dfsg-2ubuntu1.1"
        },
        {
            "binary_name":  "libqt6xml6",
            "binary_version":  "6.2.4+dfsg-2ubuntu1.1"
        },
        {
            "binary_name":  "qmake6",
            "binary_version":  "6.2.4+dfsg-2ubuntu1.1"
        },
        {
            "binary_name":  "qmake6-bin",
            "binary_version":  "6.2.4+dfsg-2ubuntu1.1"
        },
        {
            "binary_name":  "qt6-base-dev-tools",
            "binary_version":  "6.2.4+dfsg-2ubuntu1.1"
        },
        {
            "binary_name":  "qt6-gtk-platformtheme",
            "binary_version":  "6.2.4+dfsg-2ubuntu1.1"
        },
        {
            "binary_name":  "qt6-qpa-plugins",
            "binary_version":  "6.2.4+dfsg-2ubuntu1.1"
        },
        {
            "binary_name":  "qt6-xdgdesktopportal-platformtheme",
            "binary_version":  "6.2.4+dfsg-2ubuntu1.1"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-96432.json"

Ubuntu:24.04:LTS / qt6-base

Package

Name: qt6-base
Purl: pkg:deb/ubuntu/qt6-base?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.4.2+dfsg-18

6.4.2+dfsg-19

6.4.2+dfsg-19build1

6.4.2+dfsg-20

6.4.2+dfsg-21

6.4.2+dfsg-21.1build4

6.4.2+dfsg-21.1build5

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "libqt6concurrent6t64",
            "binary_version":  "6.4.2+dfsg-21.1build5"
        },
        {
            "binary_name":  "libqt6core6t64",
            "binary_version":  "6.4.2+dfsg-21.1build5"
        },
        {
            "binary_name":  "libqt6dbus6t64",
            "binary_version":  "6.4.2+dfsg-21.1build5"
        },
        {
            "binary_name":  "libqt6gui6t64",
            "binary_version":  "6.4.2+dfsg-21.1build5"
        },
        {
            "binary_name":  "libqt6network6t64",
            "binary_version":  "6.4.2+dfsg-21.1build5"
        },
        {
            "binary_name":  "libqt6opengl6t64",
            "binary_version":  "6.4.2+dfsg-21.1build5"
        },
        {
            "binary_name":  "libqt6openglwidgets6t64",
            "binary_version":  "6.4.2+dfsg-21.1build5"
        },
        {
            "binary_name":  "libqt6printsupport6t64",
            "binary_version":  "6.4.2+dfsg-21.1build5"
        },
        {
            "binary_name":  "libqt6sql6-ibase",
            "binary_version":  "6.4.2+dfsg-21.1build5"
        },
        {
            "binary_name":  "libqt6sql6-mysql",
            "binary_version":  "6.4.2+dfsg-21.1build5"
        },
        {
            "binary_name":  "libqt6sql6-odbc",
            "binary_version":  "6.4.2+dfsg-21.1build5"
        },
        {
            "binary_name":  "libqt6sql6-psql",
            "binary_version":  "6.4.2+dfsg-21.1build5"
        },
        {
            "binary_name":  "libqt6sql6-sqlite",
            "binary_version":  "6.4.2+dfsg-21.1build5"
        },
        {
            "binary_name":  "libqt6sql6t64",
            "binary_version":  "6.4.2+dfsg-21.1build5"
        },
        {
            "binary_name":  "libqt6test6t64",
            "binary_version":  "6.4.2+dfsg-21.1build5"
        },
        {
            "binary_name":  "libqt6widgets6t64",
            "binary_version":  "6.4.2+dfsg-21.1build5"
        },
        {
            "binary_name":  "libqt6xml6t64",
            "binary_version":  "6.4.2+dfsg-21.1build5"
        },
        {
            "binary_name":  "qmake6",
            "binary_version":  "6.4.2+dfsg-21.1build5"
        },
        {
            "binary_name":  "qmake6-bin",
            "binary_version":  "6.4.2+dfsg-21.1build5"
        },
        {
            "binary_name":  "qt6-base-dev-tools",
            "binary_version":  "6.4.2+dfsg-21.1build5"
        },
        {
            "binary_name":  "qt6-base-doc-html",
            "binary_version":  "6.4.2+dfsg-21.1build5"
        },
        {
            "binary_name":  "qt6-base-examples",
            "binary_version":  "6.4.2+dfsg-21.1build5"
        },
        {
            "binary_name":  "qt6-gtk-platformtheme",
            "binary_version":  "6.4.2+dfsg-21.1build5"
        },
        {
            "binary_name":  "qt6-qpa-plugins",
            "binary_version":  "6.4.2+dfsg-21.1build5"
        },
        {
            "binary_name":  "qt6-xdgdesktopportal-platformtheme",
            "binary_version":  "6.4.2+dfsg-21.1build5"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-96432.json"

Ubuntu:26.10 / qt6-base

Package

Name: qt6-base
Purl: pkg:deb/ubuntu/qt6-base?arch=source&distro=stonking

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.10.2+dfsg-7

6.10.2+dfsg-14ubuntu2

6.10.2+dfsg-15

6.10.2+dfsg-16

6.11.2+dfsg-4ubuntu2

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "libqt6concurrent6",
            "binary_version":  "6.11.2+dfsg-4ubuntu2"
        },
        {
            "binary_name":  "libqt6core6t64",
            "binary_version":  "6.11.2+dfsg-4ubuntu2"
        },
        {
            "binary_name":  "libqt6dbus6",
            "binary_version":  "6.11.2+dfsg-4ubuntu2"
        },
        {
            "binary_name":  "libqt6gui6",
            "binary_version":  "6.11.2+dfsg-4ubuntu2"
        },
        {
            "binary_name":  "libqt6network6",
            "binary_version":  "6.11.2+dfsg-4ubuntu2"
        },
        {
            "binary_name":  "libqt6opengl6",
            "binary_version":  "6.11.2+dfsg-4ubuntu2"
        },
        {
            "binary_name":  "libqt6openglwidgets6",
            "binary_version":  "6.11.2+dfsg-4ubuntu2"
        },
        {
            "binary_name":  "libqt6printsupport6",
            "binary_version":  "6.11.2+dfsg-4ubuntu2"
        },
        {
            "binary_name":  "libqt6sql6",
            "binary_version":  "6.11.2+dfsg-4ubuntu2"
        },
        {
            "binary_name":  "libqt6sql6-ibase",
            "binary_version":  "6.11.2+dfsg-4ubuntu2"
        },
        {
            "binary_name":  "libqt6sql6-mysql",
            "binary_version":  "6.11.2+dfsg-4ubuntu2"
        },
        {
            "binary_name":  "libqt6sql6-odbc",
            "binary_version":  "6.11.2+dfsg-4ubuntu2"
        },
        {
            "binary_name":  "libqt6sql6-psql",
            "binary_version":  "6.11.2+dfsg-4ubuntu2"
        },
        {
            "binary_name":  "libqt6sql6-sqlite",
            "binary_version":  "6.11.2+dfsg-4ubuntu2"
        },
        {
            "binary_name":  "libqt6test6",
            "binary_version":  "6.11.2+dfsg-4ubuntu2"
        },
        {
            "binary_name":  "libqt6waylandclient6",
            "binary_version":  "6.11.2+dfsg-4ubuntu2"
        },
        {
            "binary_name":  "libqt6widgets6",
            "binary_version":  "6.11.2+dfsg-4ubuntu2"
        },
        {
            "binary_name":  "libqt6wlshellintegration6",
            "binary_version":  "6.11.2+dfsg-4ubuntu2"
        },
        {
            "binary_name":  "libqt6xml6",
            "binary_version":  "6.11.2+dfsg-4ubuntu2"
        },
        {
            "binary_name":  "qmake6",
            "binary_version":  "6.11.2+dfsg-4ubuntu2"
        },
        {
            "binary_name":  "qmake6-bin",
            "binary_version":  "6.11.2+dfsg-4ubuntu2"
        },
        {
            "binary_name":  "qt6-base-dev-tools",
            "binary_version":  "6.11.2+dfsg-4ubuntu2"
        },
        {
            "binary_name":  "qt6-base-doc-html",
            "binary_version":  "6.11.2+dfsg-4ubuntu2"
        },
        {
            "binary_name":  "qt6-base-examples",
            "binary_version":  "6.11.2+dfsg-4ubuntu2"
        },
        {
            "binary_name":  "qt6-gtk-platformtheme",
            "binary_version":  "6.11.2+dfsg-4ubuntu2"
        },
        {
            "binary_name":  "qt6-qpa-plugins",
            "binary_version":  "6.11.2+dfsg-4ubuntu2"
        },
        {
            "binary_name":  "qt6-xdgdesktopportal-platformtheme",
            "binary_version":  "6.11.2+dfsg-4ubuntu2"
        },
        {
            "binary_name":  "qtpaths6",
            "binary_version":  "6.11.2+dfsg-4ubuntu2"
        },
        {
            "binary_name":  "qtpaths6-bin",
            "binary_version":  "6.11.2+dfsg-4ubuntu2"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-96432.json"

Ubuntu:26.04:LTS / qt6-base

Package

Name: qt6-base
Purl: pkg:deb/ubuntu/qt6-base?arch=source&distro=resolute

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.9.2+dfsg-1ubuntu1

6.9.2+dfsg-2

6.9.2+dfsg-3ubuntu1

6.9.2+dfsg-3ubuntu2

6.9.2+dfsg-4

6.10.2+dfsg-3

6.10.2+dfsg-6

6.10.2+dfsg-7

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "libqt6concurrent6",
            "binary_version":  "6.10.2+dfsg-7"
        },
        {
            "binary_name":  "libqt6core6t64",
            "binary_version":  "6.10.2+dfsg-7"
        },
        {
            "binary_name":  "libqt6dbus6",
            "binary_version":  "6.10.2+dfsg-7"
        },
        {
            "binary_name":  "libqt6gui6",
            "binary_version":  "6.10.2+dfsg-7"
        },
        {
            "binary_name":  "libqt6network6",
            "binary_version":  "6.10.2+dfsg-7"
        },
        {
            "binary_name":  "libqt6opengl6",
            "binary_version":  "6.10.2+dfsg-7"
        },
        {
            "binary_name":  "libqt6openglwidgets6",
            "binary_version":  "6.10.2+dfsg-7"
        },
        {
            "binary_name":  "libqt6printsupport6",
            "binary_version":  "6.10.2+dfsg-7"
        },
        {
            "binary_name":  "libqt6sql6",
            "binary_version":  "6.10.2+dfsg-7"
        },
        {
            "binary_name":  "libqt6sql6-ibase",
            "binary_version":  "6.10.2+dfsg-7"
        },
        {
            "binary_name":  "libqt6sql6-mysql",
            "binary_version":  "6.10.2+dfsg-7"
        },
        {
            "binary_name":  "libqt6sql6-odbc",
            "binary_version":  "6.10.2+dfsg-7"
        },
        {
            "binary_name":  "libqt6sql6-psql",
            "binary_version":  "6.10.2+dfsg-7"
        },
        {
            "binary_name":  "libqt6sql6-sqlite",
            "binary_version":  "6.10.2+dfsg-7"
        },
        {
            "binary_name":  "libqt6test6",
            "binary_version":  "6.10.2+dfsg-7"
        },
        {
            "binary_name":  "libqt6waylandclient6",
            "binary_version":  "6.10.2+dfsg-7"
        },
        {
            "binary_name":  "libqt6widgets6",
            "binary_version":  "6.10.2+dfsg-7"
        },
        {
            "binary_name":  "libqt6wlshellintegration6",
            "binary_version":  "6.10.2+dfsg-7"
        },
        {
            "binary_name":  "libqt6xml6",
            "binary_version":  "6.10.2+dfsg-7"
        },
        {
            "binary_name":  "qmake6",
            "binary_version":  "6.10.2+dfsg-7"
        },
        {
            "binary_name":  "qmake6-bin",
            "binary_version":  "6.10.2+dfsg-7"
        },
        {
            "binary_name":  "qt6-base-dev-tools",
            "binary_version":  "6.10.2+dfsg-7"
        },
        {
            "binary_name":  "qt6-base-doc-html",
            "binary_version":  "6.10.2+dfsg-7"
        },
        {
            "binary_name":  "qt6-base-examples",
            "binary_version":  "6.10.2+dfsg-7"
        },
        {
            "binary_name":  "qt6-gtk-platformtheme",
            "binary_version":  "6.10.2+dfsg-7"
        },
        {
            "binary_name":  "qt6-qpa-plugins",
            "binary_version":  "6.10.2+dfsg-7"
        },
        {
            "binary_name":  "qt6-xdgdesktopportal-platformtheme",
            "binary_version":  "6.10.2+dfsg-7"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-96432.json"