These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
An out-of-bounds read vulnerability exists in QTextCodec::codecForName() in Qt. The function is called with a QByteArray that is not NUL-terminated, the codec-name matching routine reads past the end of the supplied buffer. This can lead to an incorrect text codec being selected or, in the worst case, a denial of service if the over-read reaches unmapped memory. The affected code resides in the Qt5Compat [truncated]
CVE-2026-12379 is an Open Redirect vulnerability in the OAuth/OIDC authentication implementation of the Axivion Dashboard. The login flow did not properly restrict the post-authentication redirect to the application's own origin, allowing a user who follows a crafted login link to be sent to an untrusted external site after authenticating against the genuine Dashboard. This vulnerability can be abused for [truncated]
CVE-2026-12593 involves an undocumented Dashboard API endpoint that could allow an attacker to create an API token for another user, potentially leading to high privileges. This vulnerability affects systems using the Dashboard API and requires immediate attention from administrators and users. The attack would require a preexisting internal user with more privileges than the attacker, knowledge of the us [truncated]
CVE-2025-14576 is a high-severity vulnerability in the Qt SVG module. Insufficient validation of node IDs allows arbitrary QML/JavaScript code injection when loading malicious SVG files through the VectorImage component in Qt Quick. This could lead to denial of service, information disclosure, or other impacts depending on the application's privilege level and data access. The vulnerability has a CVSS sco [truncated]
CVE-2016-10040 is a stack-based buffer overflow in Qt's QXmlSimpleReader affecting Qt 4.8.5. According to the NVD record, an XML file with multiple nested open tags can trigger an application crash, resulting in denial of service. The NVD CVSS vector rates the issue as medium severity and shows availability impact only.