{"id":"AZL-112181","summary":"CVE-2026-105946 affecting package qtbase 6.6.3-7","details":"Out-of-bounds read in the QAuthenticator NTLM authentication handling in the Qt Network module in Qt Group Qt allows remote attackers to obtain sensitive information (heap memory contents) or cause a denial of service (application crash) via a crafted NTLM challenge sent by a malicious server or proxy, when an application using QNetworkAccessManager or QTcpSocket authenticates with NTLM.","modified":"2026-11-03T05:33:06Z","published":"2026-10-27T07:16:31Z","upstream":["CVE-2026-105946"],"references":[{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105946"}],"affected":[{"package":{"name":"qtbase","ecosystem":"Azure Linux:3","purl":"pkg:rpm/azure-linux/qtbase"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"6.6.3-7"}]}],"database_specific":{"source":"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-112181.json"}}],"schema_version":"1.9.2"}