CVE-2026-13326

Out-of-bounds read and integer underflow vulnerability in QNdefNfcTextRecord impacts Qt NFC module

Published Sep 11, 2026 CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed

Description

An out-of-bounds read in Qt NFC's language code length parsing allows a physically proximate attacker to cause a denial of service or limited memory disclosure via a crafted NFC tag.

Analysis

Technical impact

An out‑of‑bounds read in Qt NFC's language code length parser allows a physically proximate attacker to read memory between a bounded and an unbounded length, potentially revealing data and triggering a denial of service. The vulnerability, classified as CWE‑125 and CWE‑191, corrupts program state or exposes data but does not permit arbitrary code execution.

Affected Systems

Qt’s NFC module is affected, specifically the QNdefNfcTextRecord handling within the Qt Qt library. Version information is not specified in the CVE vulnerable.

Risk and Exploitability

The CVSS score of 6.9 indicates medium to high severity. EPSS information is not available and the vulnerability is not listed in CISA KEV, suggesting no widespread exploitation yet. The attack likely requires an attacker to present a crafted NFC tag to a device that actively scans NFC tags, meaning physical proximity is necessary to cause a denial of service or disclose limited memory.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

unaffected

Version	Status	Constraints
`5.2.0`	affected	< 6.8.9
`6.9.0`	affected	< 6.11.2

No data.

Vendor Product Versions

Version	Status	Scheme	Platform
`[5.2.0,6.8.9)`	affected	semver	—
`[6.9.0,6.11.2)`	affected	semver	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Upgrade Qt to a version that fixes the QNdefNfcTextRecord vulnerability once the vendor releases an update.
If no patch is immediately available, disable the NFC feature on devices that do not need it, or limit access to it through proper authentication or wh devices that use NFC to prevent unauthorized tags from being presented within range.
As a temporary countermeasure, implement additional validation of NFC data using application‑level checks to detect malformed tags before processing, or restrict NFC usage to trusted devices only.

Generated by OpenCVE AI on September 11, 2026 at 08:23 UTC.

Tracking

Advisories

No advisories available

Metrics

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction Active

Vulnerable System Confidentiality Impact Low

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.153% probability within 30 days)

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://codereview.qt-project.org/c/qt/qtconnectivity/+/743136

History

Sep 11, 2026 12:30 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Sep 11, 2026 6:30 AM Description updated. Title updated. First appearance in the feed. Weaknesses updated. Affected versions updated. Affected vendors updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		An out-of-bounds read in Qt NFC's language code length parsing allows a physically proximate attacker to cause a denial of service or limited memory disclosure via a crafted NFC tag.
Title		Out-of-bounds read and integer underflow vulnerability in QNdefNfcTextRecord impacts Qt NFC module
First Time appeared		Qt Qt qt
Weaknesses		CWE-125 CWE-191
CPEs		cpe:2.3:a:qt:qt::::::::
Vendors & Products		Qt Qt qt
References		https://codereview.qt-project.org/c/qt/qtconnectivity/+/743136
Metrics		cvssV4_0 `{'score': 6.9, 'vector': 'CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N'}`