OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-78253

LOW · CVSS 2.3 EPSS 0.25%

Source: NVD + CISA KEV + EPSS · Published 2026-09-23 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

The vulnerability in QXmlStreamReader::readElementText() allows attackers to exploit uncontrolled recursion when processing specially crafted XML documents, leading to application crashes due to stack exhaustion. While the severity is rated low, organizations using affected versions of Qt should prioritize this issue to prevent potential denial-of-service attacks that could disrupt application availability. Developers and system administrators working with Qt libraries should assess their implementations for exposure to this vulnerability.

CVE
CVE-2026-78253
Severity
LOW
CVSS
2.3
EPSS
0.25%

Original NVD Description

Uncontrolled recursion in QXmlStreamReader::readElementText() in Qt Group Qt allows attackers to cause a denial of service (application crash via stack exhaustion) via a crafted XML document.