CVE-2026-95509

Last refreshed2026-10-12

Status: UPDATED | Advisory ID: CVE-2026-95509

Key Details

CVE	CVE-2026-95509
CVSS Score / Version	8.8 (High) / CVSS v4.0
Updated	2026-09-30
Affected products	Qt for MCUs
Classified as	CWE-125 (Out-of-bounds Read)

Affected Products, Subsystems & Sectors

Vendor	Product	Affected Versions	Patch Status
qt	Qt for MCUs

Vendor

Product

Affected Versions

Patch Status

Qt for MCUs

Subsystems	General OT
Sectors	Multiple

What to Know

Strings optimized for Latin-1 displaying Latin-1 characters cause incorrect String.arg() formatting by an incorrect buffer size calculation, causing out-of-bounds reading.

What to Do

Monitor qt's web page for any future patch releases.

References

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-95509
CVE	https://www.cve.org/CVERecord?id=CVE-2026-95509

Source

Reference

NVD

https://nvd.nist.gov/vuln/detail/CVE-2026-95509

CVE