An integer overflow occurs in the XML parsing component of Qt5Compat when handling QXmlSimpleReader input. This flaw could cause buffer corruption or program misbehaviour, potentially leading to a denial‑of‑service or, in severe cases, arbitrary code execution if the overflow is exploitably tied to privileged memory. The weakness is identified as CWE‑190, which is a classic integer‑overflow vulnerability.

The vulnerability affects Qt products that include Qt5Compat, specifically the Qt XML parsing module. All Qt5Compat and Qt versions are potentially vulnerable; no specific release numbers are provided in the data, so all distributions carrying this component should be considered at risk.

The CVSS score is 1.9, indicating a low severity impact under current scoring. The EPSS score is not available, and the vulnerability is not listed in CISA's KEV catalog, suggesting limited known exploitation. Based on the description, the likely vector involves processing untrusted XML input, but no remote exploitation media or additional prerequisites are documented. The overall risk is considered low, however the potential for memory corruption warrants monitoring for any related incidents.