Wind River Support Network

HomeDefectsLIN1022-39916

Fixed

LIN1022-39916 : Security Advisory - qtbase - CVE-2026-105946

Created: Oct 29, 2026 Updated: Nov 4, 2026

Resolved Date: Nov 3, 2026

Found In Version: 10.22.33.2

Fix Version: 10.22.33.9

Severity: Standard

Applicable for: Wind River Linux LTS 22

Component/s: Userspace

Description

Out-of-bounds read in the QAuthenticator NTLM authentication handling in the Qt Network module in Qt Group Qt allows remote attackers to obtain sensitive information (heap memory contents) or cause a denial of service (application crash) via a crafted NTLM challenge sent by a malicious server or proxy, when an application using QNetworkAccessManager or QTcpSocket authenticates with NTLM.
Data source: TQtC (a59d8014-47c4-4630-ab43-e1b13cbe58e3)

CVEs

CVE-2026-105946