{"id":"UBUNTU-CVE-2026-111487","details":"An out-of-bounds write vulnerability in the Qt Framework assimp scene import plugin of the Qt3D module.","modified":"2026-11-04T03:30:23.340448703Z","published":"2026-11-03T00:00:00Z","upstream":["CVE-2026-111487"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-111487"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2026-111487"},{"type":"REPORT","url":"https://github.com/qt/qt3d/commit/1eefe29327c5d7dd6020c5dd0735eb8e5e798f05"},{"type":"REPORT","url":"https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-111487"},{"type":"REPORT","url":"https://codereview.qt-project.org/c/qt%2Fqt3d/+/777981"}],"affected":[{"package":{"name":"qt3d-opensource-src","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/qt3d-opensource-src?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0~git20130731-0ubuntu12","5.5.1-4ubuntu2","5.5.1-4ubuntu3"],"ecosystem_specific":{"binaries":[{"binary_name":"libqt53dcollision5","binary_version":"5.5.1-4ubuntu3"},{"binary_name":"libqt53dcore5","binary_version":"5.5.1-4ubuntu3"},{"binary_name":"libqt53dinput5","binary_version":"5.5.1-4ubuntu3"},{"binary_name":"libqt53dlogic5","binary_version":"5.5.1-4ubuntu3"},{"binary_version":"5.5.1-4ubuntu3","binary_name":"libqt53dquick5"},{"binary_name":"libqt53dquickrenderer5","binary_version":"5.5.1-4ubuntu3"},{"binary_version":"5.5.1-4ubuntu3","binary_name":"libqt53drenderer5"},{"binary_version":"5.5.1-4ubuntu3","binary_name":"qml-module-qt3d"},{"binary_name":"qml-module-qtquick-scene3d","binary_version":"5.5.1-4ubuntu3"},{"binary_name":"qt3d-assimpsceneparser-plugin","binary_version":"5.5.1-4ubuntu3"},{"binary_name":"qt3d-gltfsceneparser-plugin","binary_version":"5.5.1-4ubuntu3"},{"binary_version":"5.5.1-4ubuntu3","binary_name":"qt3d5-doc-html"},{"binary_name":"qt3d5-examples","binary_version":"5.5.1-4ubuntu3"},{"binary_version":"5.5.1-4ubuntu3","binary_name":"qtdeclarative5-qt3d-plugin"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111487.json"}},{"package":{"name":"qt3d-opensource-src","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/qt3d-opensource-src?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.9.1+dfsg-3","5.9.2+dfsg-2build1","5.9.2+dfsg-3","5.9.3+dfsg-0ubuntu1","5.9.4+dfsg-0ubuntu2","5.9.5+dfsg-0ubuntu2"],"ecosystem_specific":{"binaries":[{"binary_name":"libqt53danimation5","binary_version":"5.9.5+dfsg-0ubuntu2"},{"binary_name":"libqt53dcore5","binary_version":"5.9.5+dfsg-0ubuntu2"},{"binary_version":"5.9.5+dfsg-0ubuntu2","binary_name":"libqt53dextras5"},{"binary_name":"libqt53dinput5","binary_version":"5.9.5+dfsg-0ubuntu2"},{"binary_name":"libqt53dlogic5","binary_version":"5.9.5+dfsg-0ubuntu2"},{"binary_name":"libqt53dquick5","binary_version":"5.9.5+dfsg-0ubuntu2"},{"binary_version":"5.9.5+dfsg-0ubuntu2","binary_name":"libqt53dquickanimation5"},{"binary_name":"libqt53dquickextras5","binary_version":"5.9.5+dfsg-0ubuntu2"},{"binary_name":"libqt53dquickinput5","binary_version":"5.9.5+dfsg-0ubuntu2"},{"binary_version":"5.9.5+dfsg-0ubuntu2","binary_name":"libqt53dquickrender5"},{"binary_version":"5.9.5+dfsg-0ubuntu2","binary_name":"libqt53dquickscene2d5"},{"binary_version":"5.9.5+dfsg-0ubuntu2","binary_name":"libqt53drender5"},{"binary_version":"5.9.5+dfsg-0ubuntu2","binary_name":"qml-module-qt3d"},{"binary_name":"qml-module-qtquick-scene2d","binary_version":"5.9.5+dfsg-0ubuntu2"},{"binary_version":"5.9.5+dfsg-0ubuntu2","binary_name":"qml-module-qtquick-scene3d"},{"binary_name":"qt3d-assimpsceneimport-plugin","binary_version":"5.9.5+dfsg-0ubuntu2"},{"binary_name":"qt3d-defaultgeometryloader-plugin","binary_version":"5.9.5+dfsg-0ubuntu2"},{"binary_version":"5.9.5+dfsg-0ubuntu2","binary_name":"qt3d-gltfsceneio-plugin"},{"binary_name":"qt3d-scene2d-plugin","binary_version":"5.9.5+dfsg-0ubuntu2"},{"binary_name":"qt3d5-dev-tools","binary_version":"5.9.5+dfsg-0ubuntu2"},{"binary_name":"qt3d5-doc-html","binary_version":"5.9.5+dfsg-0ubuntu2"},{"binary_name":"qt3d5-examples","binary_version":"5.9.5+dfsg-0ubuntu2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111487.json"}},{"package":{"name":"qt3d-opensource-src","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/qt3d-opensource-src?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.12.4+dfsg-1","5.12.5+dfsg-1","5.12.5+dfsg-1build1","5.12.5+dfsg-1build2","5.12.8+dfsg-0ubuntu1"],"ecosystem_specific":{"binaries":[{"binary_name":"libqt53danimation5","binary_version":"5.12.8+dfsg-0ubuntu1"},{"binary_name":"libqt53dcore5","binary_version":"5.12.8+dfsg-0ubuntu1"},{"binary_name":"libqt53dextras5","binary_version":"5.12.8+dfsg-0ubuntu1"},{"binary_version":"5.12.8+dfsg-0ubuntu1","binary_name":"libqt53dinput5"},{"binary_version":"5.12.8+dfsg-0ubuntu1","binary_name":"libqt53dlogic5"},{"binary_version":"5.12.8+dfsg-0ubuntu1","binary_name":"libqt53dquick5"},{"binary_name":"libqt53dquickanimation5","binary_version":"5.12.8+dfsg-0ubuntu1"},{"binary_name":"libqt53dquickextras5","binary_version":"5.12.8+dfsg-0ubuntu1"},{"binary_version":"5.12.8+dfsg-0ubuntu1","binary_name":"libqt53dquickinput5"},{"binary_name":"libqt53dquickrender5","binary_version":"5.12.8+dfsg-0ubuntu1"},{"binary_name":"libqt53dquickscene2d5","binary_version":"5.12.8+dfsg-0ubuntu1"},{"binary_version":"5.12.8+dfsg-0ubuntu1","binary_name":"libqt53drender5"},{"binary_name":"qml-module-qt3d","binary_version":"5.12.8+dfsg-0ubuntu1"},{"binary_name":"qml-module-qtquick-scene2d","binary_version":"5.12.8+dfsg-0ubuntu1"},{"binary_name":"qml-module-qtquick-scene3d","binary_version":"5.12.8+dfsg-0ubuntu1"},{"binary_version":"5.12.8+dfsg-0ubuntu1","binary_name":"qt3d-assimpsceneimport-plugin"},{"binary_name":"qt3d-defaultgeometryloader-plugin","binary_version":"5.12.8+dfsg-0ubuntu1"},{"binary_version":"5.12.8+dfsg-0ubuntu1","binary_name":"qt3d-gltfsceneio-plugin"},{"binary_name":"qt3d-scene2d-plugin","binary_version":"5.12.8+dfsg-0ubuntu1"},{"binary_name":"qt3d5-dev-tools","binary_version":"5.12.8+dfsg-0ubuntu1"},{"binary_name":"qt3d5-doc-html","binary_version":"5.12.8+dfsg-0ubuntu1"},{"binary_version":"5.12.8+dfsg-0ubuntu1","binary_name":"qt3d5-examples"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111487.json"}},{"package":{"name":"qt3d-opensource-src","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/qt3d-opensource-src?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.2+dfsg-2","5.15.3+dfsg-1"],"ecosystem_specific":{"binaries":[{"binary_version":"5.15.3+dfsg-1","binary_name":"libqt53danimation5"},{"binary_name":"libqt53dcore5","binary_version":"5.15.3+dfsg-1"},{"binary_version":"5.15.3+dfsg-1","binary_name":"libqt53dextras5"},{"binary_name":"libqt53dinput5","binary_version":"5.15.3+dfsg-1"},{"binary_version":"5.15.3+dfsg-1","binary_name":"libqt53dlogic5"},{"binary_version":"5.15.3+dfsg-1","binary_name":"libqt53dquick5"},{"binary_name":"libqt53dquickanimation5","binary_version":"5.15.3+dfsg-1"},{"binary_name":"libqt53dquickextras5","binary_version":"5.15.3+dfsg-1"},{"binary_name":"libqt53dquickinput5","binary_version":"5.15.3+dfsg-1"},{"binary_version":"5.15.3+dfsg-1","binary_name":"libqt53dquickrender5"},{"binary_version":"5.15.3+dfsg-1","binary_name":"libqt53dquickscene2d5"},{"binary_name":"libqt53drender5","binary_version":"5.15.3+dfsg-1"},{"binary_version":"5.15.3+dfsg-1","binary_name":"qml-module-qt3d"},{"binary_name":"qml-module-qtquick-scene2d","binary_version":"5.15.3+dfsg-1"},{"binary_name":"qml-module-qtquick-scene3d","binary_version":"5.15.3+dfsg-1"},{"binary_version":"5.15.3+dfsg-1","binary_name":"qt3d-assimpsceneimport-plugin"},{"binary_name":"qt3d-defaultgeometryloader-plugin","binary_version":"5.15.3+dfsg-1"},{"binary_version":"5.15.3+dfsg-1","binary_name":"qt3d-gltfsceneio-plugin"},{"binary_name":"qt3d-scene2d-plugin","binary_version":"5.15.3+dfsg-1"},{"binary_name":"qt3d5-dev-tools","binary_version":"5.15.3+dfsg-1"},{"binary_version":"5.15.3+dfsg-1","binary_name":"qt3d5-doc-html"},{"binary_name":"qt3d5-examples","binary_version":"5.15.3+dfsg-1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111487.json"}},{"package":{"name":"qt6-3d","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/qt6-3d?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.2+dfsg-3","6.2.4+dfsg-1"],"ecosystem_specific":{"binaries":[{"binary_name":"libqt63danimation6","binary_version":"6.2.4+dfsg-1"},{"binary_name":"libqt63dcore6","binary_version":"6.2.4+dfsg-1"},{"binary_name":"libqt63dextras6","binary_version":"6.2.4+dfsg-1"},{"binary_version":"6.2.4+dfsg-1","binary_name":"libqt63dinput6"},{"binary_version":"6.2.4+dfsg-1","binary_name":"libqt63dlogic6"},{"binary_name":"libqt63dquick6","binary_version":"6.2.4+dfsg-1"},{"binary_version":"6.2.4+dfsg-1","binary_name":"libqt63dquickanimation6"},{"binary_name":"libqt63dquickextras6","binary_version":"6.2.4+dfsg-1"},{"binary_name":"libqt63dquickinput6","binary_version":"6.2.4+dfsg-1"},{"binary_name":"libqt63dquickrender6","binary_version":"6.2.4+dfsg-1"},{"binary_name":"libqt63dquickscene2d6","binary_version":"6.2.4+dfsg-1"},{"binary_name":"libqt63drender6","binary_version":"6.2.4+dfsg-1"},{"binary_name":"qml6-module-qt3d-animation","binary_version":"6.2.4+dfsg-1"},{"binary_name":"qml6-module-qt3d-core","binary_version":"6.2.4+dfsg-1"},{"binary_name":"qml6-module-qt3d-extras","binary_version":"6.2.4+dfsg-1"},{"binary_version":"6.2.4+dfsg-1","binary_name":"qml6-module-qt3d-input"},{"binary_version":"6.2.4+dfsg-1","binary_name":"qml6-module-qt3d-logic"},{"binary_name":"qml6-module-qt3d-render","binary_version":"6.2.4+dfsg-1"},{"binary_name":"qml6-module-qtquick-scene2d","binary_version":"6.2.4+dfsg-1"},{"binary_name":"qml6-module-qtquick-scene3d","binary_version":"6.2.4+dfsg-1"},{"binary_version":"6.2.4+dfsg-1","binary_name":"qt6-3d-assimpsceneimport-plugin"},{"binary_name":"qt6-3d-defaultgeometryloader-plugin","binary_version":"6.2.4+dfsg-1"},{"binary_name":"qt6-3d-gltfsceneio-plugin","binary_version":"6.2.4+dfsg-1"},{"binary_name":"qt6-3d-scene2d-plugin","binary_version":"6.2.4+dfsg-1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111487.json"}},{"package":{"name":"qt3d-opensource-src","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/qt3d-opensource-src?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.10+dfsg-2","5.15.12+dfsg-1","5.15.12+dfsg-1build1","5.15.12+dfsg-1build2","5.15.13+dfsg-1"],"ecosystem_specific":{"binaries":[{"binary_name":"libqt53danimation5","binary_version":"5.15.13+dfsg-1"},{"binary_version":"5.15.13+dfsg-1","binary_name":"libqt53dcore5"},{"binary_name":"libqt53dextras5","binary_version":"5.15.13+dfsg-1"},{"binary_name":"libqt53dinput5","binary_version":"5.15.13+dfsg-1"},{"binary_name":"libqt53dlogic5","binary_version":"5.15.13+dfsg-1"},{"binary_name":"libqt53dquick5","binary_version":"5.15.13+dfsg-1"},{"binary_version":"5.15.13+dfsg-1","binary_name":"libqt53dquickanimation5"},{"binary_version":"5.15.13+dfsg-1","binary_name":"libqt53dquickextras5"},{"binary_version":"5.15.13+dfsg-1","binary_name":"libqt53dquickinput5"},{"binary_name":"libqt53dquickrender5","binary_version":"5.15.13+dfsg-1"},{"binary_name":"libqt53dquickscene2d5","binary_version":"5.15.13+dfsg-1"},{"binary_version":"5.15.13+dfsg-1","binary_name":"libqt53drender5"},{"binary_name":"qml-module-qt3d","binary_version":"5.15.13+dfsg-1"},{"binary_name":"qml-module-qtquick-scene2d","binary_version":"5.15.13+dfsg-1"},{"binary_version":"5.15.13+dfsg-1","binary_name":"qml-module-qtquick-scene3d"},{"binary_name":"qt3d-assimpsceneimport-plugin","binary_version":"5.15.13+dfsg-1"},{"binary_name":"qt3d-defaultgeometryloader-plugin","binary_version":"5.15.13+dfsg-1"},{"binary_name":"qt3d-gltfsceneio-plugin","binary_version":"5.15.13+dfsg-1"},{"binary_version":"5.15.13+dfsg-1","binary_name":"qt3d-scene2d-plugin"},{"binary_name":"qt3d5-dev-tools","binary_version":"5.15.13+dfsg-1"},{"binary_name":"qt3d5-doc-html","binary_version":"5.15.13+dfsg-1"},{"binary_version":"5.15.13+dfsg-1","binary_name":"qt3d5-examples"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111487.json"}},{"package":{"name":"qt6-3d","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/qt6-3d?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.4.2+dfsg-6","6.4.2+dfsg-6build1","6.4.2+dfsg-6build2","6.4.2+dfsg-6build3"],"ecosystem_specific":{"binaries":[{"binary_name":"libqt63danimation6","binary_version":"6.4.2+dfsg-6build3"},{"binary_name":"libqt63dcore6","binary_version":"6.4.2+dfsg-6build3"},{"binary_name":"libqt63dextras6","binary_version":"6.4.2+dfsg-6build3"},{"binary_version":"6.4.2+dfsg-6build3","binary_name":"libqt63dinput6"},{"binary_name":"libqt63dlogic6","binary_version":"6.4.2+dfsg-6build3"},{"binary_name":"libqt63dquick6","binary_version":"6.4.2+dfsg-6build3"},{"binary_name":"libqt63dquickanimation6","binary_version":"6.4.2+dfsg-6build3"},{"binary_name":"libqt63dquickextras6","binary_version":"6.4.2+dfsg-6build3"},{"binary_name":"libqt63dquickinput6","binary_version":"6.4.2+dfsg-6build3"},{"binary_name":"libqt63dquickrender6","binary_version":"6.4.2+dfsg-6build3"},{"binary_version":"6.4.2+dfsg-6build3","binary_name":"libqt63dquickscene2d6"},{"binary_version":"6.4.2+dfsg-6build3","binary_name":"libqt63drender6"},{"binary_version":"6.4.2+dfsg-6build3","binary_name":"qml6-module-qt3d-animation"},{"binary_name":"qml6-module-qt3d-core","binary_version":"6.4.2+dfsg-6build3"},{"binary_version":"6.4.2+dfsg-6build3","binary_name":"qml6-module-qt3d-extras"},{"binary_version":"6.4.2+dfsg-6build3","binary_name":"qml6-module-qt3d-input"},{"binary_version":"6.4.2+dfsg-6build3","binary_name":"qml6-module-qt3d-logic"},{"binary_version":"6.4.2+dfsg-6build3","binary_name":"qml6-module-qt3d-render"},{"binary_version":"6.4.2+dfsg-6build3","binary_name":"qml6-module-qtquick-scene2d"},{"binary_name":"qml6-module-qtquick-scene3d","binary_version":"6.4.2+dfsg-6build3"},{"binary_name":"qt6-3d-assimpsceneimport-plugin","binary_version":"6.4.2+dfsg-6build3"},{"binary_name":"qt6-3d-defaultgeometryloader-plugin","binary_version":"6.4.2+dfsg-6build3"},{"binary_version":"6.4.2+dfsg-6build3","binary_name":"qt6-3d-doc-html"},{"binary_version":"6.4.2+dfsg-6build3","binary_name":"qt6-3d-examples"},{"binary_name":"qt6-3d-gltfsceneio-plugin","binary_version":"6.4.2+dfsg-6build3"},{"binary_name":"qt6-3d-scene2d-plugin","binary_version":"6.4.2+dfsg-6build3"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111487.json"}},{"package":{"name":"qt3d-opensource-src","ecosystem":"Ubuntu:26.10","purl":"pkg:deb/ubuntu/qt3d-opensource-src?arch=source&distro=stonking"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.18+dfsg-1ubuntu1","5.15.19+dfsg-2"],"ecosystem_specific":{"binaries":[{"binary_name":"libqt53danimation5","binary_version":"5.15.19+dfsg-2"},{"binary_name":"libqt53dcore5","binary_version":"5.15.19+dfsg-2"},{"binary_name":"libqt53dextras5","binary_version":"5.15.19+dfsg-2"},{"binary_name":"libqt53dinput5","binary_version":"5.15.19+dfsg-2"},{"binary_version":"5.15.19+dfsg-2","binary_name":"libqt53dlogic5"},{"binary_version":"5.15.19+dfsg-2","binary_name":"libqt53dquick5"},{"binary_version":"5.15.19+dfsg-2","binary_name":"libqt53dquickanimation5"},{"binary_version":"5.15.19+dfsg-2","binary_name":"libqt53dquickextras5"},{"binary_version":"5.15.19+dfsg-2","binary_name":"libqt53dquickinput5"},{"binary_name":"libqt53dquickrender5","binary_version":"5.15.19+dfsg-2"},{"binary_version":"5.15.19+dfsg-2","binary_name":"libqt53dquickscene2d5"},{"binary_name":"libqt53drender5","binary_version":"5.15.19+dfsg-2"},{"binary_version":"5.15.19+dfsg-2","binary_name":"qml-module-qt3d"},{"binary_name":"qml-module-qtquick-scene2d","binary_version":"5.15.19+dfsg-2"},{"binary_version":"5.15.19+dfsg-2","binary_name":"qml-module-qtquick-scene3d"},{"binary_version":"5.15.19+dfsg-2","binary_name":"qt3d-assimpsceneimport-plugin"},{"binary_name":"qt3d-defaultgeometryloader-plugin","binary_version":"5.15.19+dfsg-2"},{"binary_version":"5.15.19+dfsg-2","binary_name":"qt3d-gltfsceneio-plugin"},{"binary_name":"qt3d-scene2d-plugin","binary_version":"5.15.19+dfsg-2"},{"binary_version":"5.15.19+dfsg-2","binary_name":"qt3d5-dev-tools"},{"binary_name":"qt3d5-doc-html","binary_version":"5.15.19+dfsg-2"},{"binary_name":"qt3d5-examples","binary_version":"5.15.19+dfsg-2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111487.json"}},{"package":{"name":"qt6-3d","ecosystem":"Ubuntu:26.10","purl":"pkg:deb/ubuntu/qt6-3d?arch=source&distro=stonking"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.10.2+dfsg-1","6.10.2+dfsg-3","6.11.2+dfsg-1"],"ecosystem_specific":{"binaries":[{"binary_name":"libqt63danimation6","binary_version":"6.11.2+dfsg-1"},{"binary_name":"libqt63dcore6","binary_version":"6.11.2+dfsg-1"},{"binary_version":"6.11.2+dfsg-1","binary_name":"libqt63dextras6"},{"binary_version":"6.11.2+dfsg-1","binary_name":"libqt63dinput6"},{"binary_name":"libqt63dlogic6","binary_version":"6.11.2+dfsg-1"},{"binary_name":"libqt63dquick6","binary_version":"6.11.2+dfsg-1"},{"binary_name":"libqt63dquickextras6","binary_version":"6.11.2+dfsg-1"},{"binary_name":"libqt63dquickscene2d6","binary_version":"6.11.2+dfsg-1"},{"binary_name":"libqt63dquickscene3d6","binary_version":"6.11.2+dfsg-1"},{"binary_name":"libqt63drender6","binary_version":"6.11.2+dfsg-1"},{"binary_version":"6.11.2+dfsg-1","binary_name":"qml6-module-qt3d-animation"},{"binary_name":"qml6-module-qt3d-core","binary_version":"6.11.2+dfsg-1"},{"binary_name":"qml6-module-qt3d-extras","binary_version":"6.11.2+dfsg-1"},{"binary_name":"qml6-module-qt3d-input","binary_version":"6.11.2+dfsg-1"},{"binary_name":"qml6-module-qt3d-logic","binary_version":"6.11.2+dfsg-1"},{"binary_name":"qml6-module-qt3d-render","binary_version":"6.11.2+dfsg-1"},{"binary_name":"qml6-module-qtquick-scene2d","binary_version":"6.11.2+dfsg-1"},{"binary_version":"6.11.2+dfsg-1","binary_name":"qml6-module-qtquick-scene3d"},{"binary_version":"6.11.2+dfsg-1","binary_name":"qt6-3d-assimpsceneimport-plugin"},{"binary_name":"qt6-3d-defaultgeometryloader-plugin","binary_version":"6.11.2+dfsg-1"},{"binary_name":"qt6-3d-doc-html","binary_version":"6.11.2+dfsg-1"},{"binary_name":"qt6-3d-examples","binary_version":"6.11.2+dfsg-1"},{"binary_name":"qt6-3d-gltfsceneio-plugin","binary_version":"6.11.2+dfsg-1"},{"binary_name":"qt6-3d-scene2d-plugin","binary_version":"6.11.2+dfsg-1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111487.json"}},{"package":{"name":"qt3d-opensource-src","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/qt3d-opensource-src?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.17+dfsg-1","5.15.17+dfsg-2build1","5.15.18+dfsg-1","5.15.18+dfsg-1ubuntu1"],"ecosystem_specific":{"binaries":[{"binary_version":"5.15.18+dfsg-1ubuntu1","binary_name":"libqt53danimation5"},{"binary_version":"5.15.18+dfsg-1ubuntu1","binary_name":"libqt53dcore5"},{"binary_name":"libqt53dextras5","binary_version":"5.15.18+dfsg-1ubuntu1"},{"binary_version":"5.15.18+dfsg-1ubuntu1","binary_name":"libqt53dinput5"},{"binary_name":"libqt53dlogic5","binary_version":"5.15.18+dfsg-1ubuntu1"},{"binary_name":"libqt53dquick5","binary_version":"5.15.18+dfsg-1ubuntu1"},{"binary_name":"libqt53dquickanimation5","binary_version":"5.15.18+dfsg-1ubuntu1"},{"binary_version":"5.15.18+dfsg-1ubuntu1","binary_name":"libqt53dquickextras5"},{"binary_name":"libqt53dquickinput5","binary_version":"5.15.18+dfsg-1ubuntu1"},{"binary_version":"5.15.18+dfsg-1ubuntu1","binary_name":"libqt53dquickrender5"},{"binary_version":"5.15.18+dfsg-1ubuntu1","binary_name":"libqt53dquickscene2d5"},{"binary_version":"5.15.18+dfsg-1ubuntu1","binary_name":"libqt53drender5"},{"binary_version":"5.15.18+dfsg-1ubuntu1","binary_name":"qml-module-qt3d"},{"binary_name":"qml-module-qtquick-scene2d","binary_version":"5.15.18+dfsg-1ubuntu1"},{"binary_version":"5.15.18+dfsg-1ubuntu1","binary_name":"qml-module-qtquick-scene3d"},{"binary_name":"qt3d-assimpsceneimport-plugin","binary_version":"5.15.18+dfsg-1ubuntu1"},{"binary_version":"5.15.18+dfsg-1ubuntu1","binary_name":"qt3d-defaultgeometryloader-plugin"},{"binary_name":"qt3d-gltfsceneio-plugin","binary_version":"5.15.18+dfsg-1ubuntu1"},{"binary_version":"5.15.18+dfsg-1ubuntu1","binary_name":"qt3d-scene2d-plugin"},{"binary_version":"5.15.18+dfsg-1ubuntu1","binary_name":"qt3d5-dev-tools"},{"binary_version":"5.15.18+dfsg-1ubuntu1","binary_name":"qt3d5-doc-html"},{"binary_version":"5.15.18+dfsg-1ubuntu1","binary_name":"qt3d5-examples"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111487.json"}},{"package":{"name":"qt6-3d","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/qt6-3d?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.9.2+dfsg-1","6.9.2+dfsg-1build1","6.10.2+dfsg-1"],"ecosystem_specific":{"binaries":[{"binary_version":"6.10.2+dfsg-1","binary_name":"libqt63danimation6"},{"binary_version":"6.10.2+dfsg-1","binary_name":"libqt63dcore6"},{"binary_name":"libqt63dextras6","binary_version":"6.10.2+dfsg-1"},{"binary_name":"libqt63dinput6","binary_version":"6.10.2+dfsg-1"},{"binary_name":"libqt63dlogic6","binary_version":"6.10.2+dfsg-1"},{"binary_name":"libqt63dquick6","binary_version":"6.10.2+dfsg-1"},{"binary_version":"6.10.2+dfsg-1","binary_name":"libqt63dquickextras6"},{"binary_version":"6.10.2+dfsg-1","binary_name":"libqt63dquickscene2d6"},{"binary_name":"libqt63dquickscene3d6","binary_version":"6.10.2+dfsg-1"},{"binary_name":"libqt63drender6","binary_version":"6.10.2+dfsg-1"},{"binary_version":"6.10.2+dfsg-1","binary_name":"qml6-module-qt3d-animation"},{"binary_name":"qml6-module-qt3d-core","binary_version":"6.10.2+dfsg-1"},{"binary_name":"qml6-module-qt3d-extras","binary_version":"6.10.2+dfsg-1"},{"binary_name":"qml6-module-qt3d-input","binary_version":"6.10.2+dfsg-1"},{"binary_name":"qml6-module-qt3d-logic","binary_version":"6.10.2+dfsg-1"},{"binary_name":"qml6-module-qt3d-render","binary_version":"6.10.2+dfsg-1"},{"binary_name":"qml6-module-qtquick-scene2d","binary_version":"6.10.2+dfsg-1"},{"binary_name":"qml6-module-qtquick-scene3d","binary_version":"6.10.2+dfsg-1"},{"binary_name":"qt6-3d-assimpsceneimport-plugin","binary_version":"6.10.2+dfsg-1"},{"binary_version":"6.10.2+dfsg-1","binary_name":"qt6-3d-defaultgeometryloader-plugin"},{"binary_name":"qt6-3d-doc-html","binary_version":"6.10.2+dfsg-1"},{"binary_name":"qt6-3d-examples","binary_version":"6.10.2+dfsg-1"},{"binary_version":"6.10.2+dfsg-1","binary_name":"qt6-3d-gltfsceneio-plugin"},{"binary_version":"6.10.2+dfsg-1","binary_name":"qt6-3d-scene2d-plugin"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111487.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/R:U/RE:L/U:Amber"},{"type":"Ubuntu","score":"medium"}]}