# CVE-2026-19248: qtbase-opensource-src: QDomDocument XML parsing is vulnerable to a remotely-triggerable denial-of-service crash when processing untrusted in...

CVE-2026-19248 is fixed in 24 products on 1 platform, first by DEBIAN-CVE-2026-19248, released September 27, 2026. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2026-19248
- Priority: High
- CVSS: 7.5 (Important)
- EPSS: 0.0042
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Sep 16, 2026

## Description

QDomDocument XML parsing is vulnerable to a remotely-triggerable denial-of-service crash when processing untrusted input.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | qt5-qtbase Fedora 43 | 5.15.18-2.fc43 | [FEDORA-2026-D615EB3F43](https://patchblox.com/security/data/fix/linux/fedora-2026-d615eb3f43.md) | Nov 7, 2026 |
| Linux | qt5-qtbase RHEL 8 | 0:5.15.3-10.el8_10 | [RHSA-2026:93924](https://patchblox.com/security/data/fix/linux/rhsa-2026-93924.md) | Nov 3, 2026 |
| Linux | qt5-qtbase RHEL 9 | 0:5.15.9-11.el9_8.2 | [RHSA-2026:87082](https://patchblox.com/security/data/fix/linux/rhsa-2026-87082.md) | Oct 24, 2026 |
| Linux | qt5-qtbase almalinux 8 | 5.15.3-10.el8_10 | [ALSA-2026:93924](https://patchblox.com/security/data/fix/linux/alsa-2026-93924.md) | Nov 7, 2026 |
| Linux | qt5-qtbase almalinux 9 | 5.15.9-11.el9_8.2 | [ALSA-2026:87082](https://patchblox.com/security/data/fix/linux/alsa-2026-87082.md) | Nov 7, 2026 |
| Linux | qt5-qtbase ol 8 | 0:5.15.3-10.el8_10 | [ELSA-2026-93924](https://patchblox.com/security/data/fix/linux/elsa-2026-93924.md) | Nov 7, 2026 |
| Linux | qt5-qtbase ol 9 | 0:5.15.9-11.el9_8.2 | [ELSA-2026-87082](https://patchblox.com/security/data/fix/linux/elsa-2026-87082.md) | Nov 7, 2026 |
| Linux | qt5-qtbase rocky 8 | 0:5.15.3-10.el8_10 | [RLSA-2026:93924](https://patchblox.com/security/data/fix/linux/rlsa-2026-93924.md) | Nov 7, 2026 |
| Linux | qt5-qtbase rocky 9 | 0:5.15.9-11.el9_8.2 | [RLSA-2026:87082](https://patchblox.com/security/data/fix/linux/rlsa-2026-87082.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-common Fedora 43 | 5.15.18-2.fc43 | [FEDORA-2026-D615EB3F43](https://patchblox.com/security/data/fix/linux/fedora-2026-d615eb3f43.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-common RHEL 8 | 0:5.15.3-10.el8_10 | [RHSA-2026:93924](https://patchblox.com/security/data/fix/linux/rhsa-2026-93924.md) | Nov 3, 2026 |
| Linux | qt5-qtbase-common RHEL 9 | 0:5.15.9-11.el9_8.2 | [RHSA-2026:87082](https://patchblox.com/security/data/fix/linux/rhsa-2026-87082.md) | Oct 24, 2026 |
| Linux | qt5-qtbase-common almalinux 8 | 5.15.3-10.el8_10 | [ALSA-2026:93924](https://patchblox.com/security/data/fix/linux/alsa-2026-93924.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-common almalinux 9 | 5.15.9-11.el9_8.2 | [ALSA-2026:87082](https://patchblox.com/security/data/fix/linux/alsa-2026-87082.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-common ol 8 | 0:5.15.3-10.el8_10 | [ELSA-2026-93924](https://patchblox.com/security/data/fix/linux/elsa-2026-93924.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-common ol 9 | 0:5.15.9-11.el9_8.2 | [ELSA-2026-87082](https://patchblox.com/security/data/fix/linux/elsa-2026-87082.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-debuginfo Fedora 43 | 5.15.18-2.fc43 | [FEDORA-2026-D615EB3F43](https://patchblox.com/security/data/fix/linux/fedora-2026-d615eb3f43.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-debugsource Fedora 43 | 5.15.18-2.fc43 | [FEDORA-2026-D615EB3F43](https://patchblox.com/security/data/fix/linux/fedora-2026-d615eb3f43.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-devel Fedora 43 | 5.15.18-2.fc43 | [FEDORA-2026-D615EB3F43](https://patchblox.com/security/data/fix/linux/fedora-2026-d615eb3f43.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-devel RHEL 8 | 0:5.15.3-10.el8_10 | [RHSA-2026:93924](https://patchblox.com/security/data/fix/linux/rhsa-2026-93924.md) | Nov 3, 2026 |
| Linux | qt5-qtbase-devel RHEL 9 | 0:5.15.9-11.el9_8.2 | [RHSA-2026:87082](https://patchblox.com/security/data/fix/linux/rhsa-2026-87082.md) | Oct 24, 2026 |
| Linux | qt5-qtbase-devel almalinux 8 | 5.15.3-10.el8_10 | [ALSA-2026:93924](https://patchblox.com/security/data/fix/linux/alsa-2026-93924.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-devel almalinux 9 | 5.15.9-11.el9_8.2 | [ALSA-2026:87082](https://patchblox.com/security/data/fix/linux/alsa-2026-87082.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-devel ol 8 | 0:5.15.3-10.el8_10 | [ELSA-2026-93924](https://patchblox.com/security/data/fix/linux/elsa-2026-93924.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-devel ol 9 | 0:5.15.9-11.el9_8.2 | [ELSA-2026-87082](https://patchblox.com/security/data/fix/linux/elsa-2026-87082.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-devel-debuginfo Fedora 43 | 5.15.18-2.fc43 | [FEDORA-2026-D615EB3F43](https://patchblox.com/security/data/fix/linux/fedora-2026-d615eb3f43.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-examples Fedora 43 | 5.15.18-2.fc43 | [FEDORA-2026-D615EB3F43](https://patchblox.com/security/data/fix/linux/fedora-2026-d615eb3f43.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-examples RHEL 8 | 0:5.15.3-10.el8_10 | [RHSA-2026:93924](https://patchblox.com/security/data/fix/linux/rhsa-2026-93924.md) | Nov 3, 2026 |
| Linux | qt5-qtbase-examples RHEL 9 | 0:5.15.9-11.el9_8.2 | [RHSA-2026:87082](https://patchblox.com/security/data/fix/linux/rhsa-2026-87082.md) | Oct 24, 2026 |
| Linux | qt5-qtbase-examples almalinux 8 | 5.15.3-10.el8_10 | [ALSA-2026:93924](https://patchblox.com/security/data/fix/linux/alsa-2026-93924.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-examples almalinux 9 | 5.15.9-11.el9_8.2 | [ALSA-2026:87082](https://patchblox.com/security/data/fix/linux/alsa-2026-87082.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-examples ol 8 | 0:5.15.3-10.el8_10 | [ELSA-2026-93924](https://patchblox.com/security/data/fix/linux/elsa-2026-93924.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-examples ol 9 | 0:5.15.9-11.el9_8.2 | [ELSA-2026-87082](https://patchblox.com/security/data/fix/linux/elsa-2026-87082.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-examples-debuginfo Fedora 43 | 5.15.18-2.fc43 | [FEDORA-2026-D615EB3F43](https://patchblox.com/security/data/fix/linux/fedora-2026-d615eb3f43.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-gui Fedora 43 | 5.15.18-2.fc43 | [FEDORA-2026-D615EB3F43](https://patchblox.com/security/data/fix/linux/fedora-2026-d615eb3f43.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-gui RHEL 8 | 0:5.15.3-10.el8_10 | [RHSA-2026:93924](https://patchblox.com/security/data/fix/linux/rhsa-2026-93924.md) | Nov 3, 2026 |
| Linux | qt5-qtbase-gui RHEL 9 | 0:5.15.9-11.el9_8.2 | [RHSA-2026:87082](https://patchblox.com/security/data/fix/linux/rhsa-2026-87082.md) | Oct 24, 2026 |
| Linux | qt5-qtbase-gui almalinux 8 | 5.15.3-10.el8_10 | [ALSA-2026:93924](https://patchblox.com/security/data/fix/linux/alsa-2026-93924.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-gui almalinux 9 | 5.15.9-11.el9_8.2 | [ALSA-2026:87082](https://patchblox.com/security/data/fix/linux/alsa-2026-87082.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-gui ol 8 | 0:5.15.3-10.el8_10 | [ELSA-2026-93924](https://patchblox.com/security/data/fix/linux/elsa-2026-93924.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-gui ol 9 | 0:5.15.9-11.el9_8.2 | [ELSA-2026-87082](https://patchblox.com/security/data/fix/linux/elsa-2026-87082.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-gui-debuginfo Fedora 43 | 5.15.18-2.fc43 | [FEDORA-2026-D615EB3F43](https://patchblox.com/security/data/fix/linux/fedora-2026-d615eb3f43.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-ibase Fedora 43 | 5.15.18-2.fc43 | [FEDORA-2026-D615EB3F43](https://patchblox.com/security/data/fix/linux/fedora-2026-d615eb3f43.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-ibase-debuginfo Fedora 43 | 5.15.18-2.fc43 | [FEDORA-2026-D615EB3F43](https://patchblox.com/security/data/fix/linux/fedora-2026-d615eb3f43.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-mysql Fedora 43 | 5.15.18-2.fc43 | [FEDORA-2026-D615EB3F43](https://patchblox.com/security/data/fix/linux/fedora-2026-d615eb3f43.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-mysql RHEL 8 | 0:5.15.3-10.el8_10 | [RHSA-2026:93924](https://patchblox.com/security/data/fix/linux/rhsa-2026-93924.md) | Nov 3, 2026 |
| Linux | qt5-qtbase-mysql RHEL 9 | 0:5.15.9-11.el9_8.2 | [RHSA-2026:87082](https://patchblox.com/security/data/fix/linux/rhsa-2026-87082.md) | Oct 24, 2026 |
| Linux | qt5-qtbase-mysql almalinux 8 | 5.15.3-10.el8_10 | [ALSA-2026:93924](https://patchblox.com/security/data/fix/linux/alsa-2026-93924.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-mysql almalinux 9 | 5.15.9-11.el9_8.2 | [ALSA-2026:87082](https://patchblox.com/security/data/fix/linux/alsa-2026-87082.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-mysql ol 8 | 0:5.15.3-10.el8_10 | [ELSA-2026-93924](https://patchblox.com/security/data/fix/linux/elsa-2026-93924.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-mysql ol 9 | 0:5.15.9-11.el9_8.2 | [ELSA-2026-87082](https://patchblox.com/security/data/fix/linux/elsa-2026-87082.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-mysql-debuginfo Fedora 43 | 5.15.18-2.fc43 | [FEDORA-2026-D615EB3F43](https://patchblox.com/security/data/fix/linux/fedora-2026-d615eb3f43.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-odbc Fedora 43 | 5.15.18-2.fc43 | [FEDORA-2026-D615EB3F43](https://patchblox.com/security/data/fix/linux/fedora-2026-d615eb3f43.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-odbc RHEL 8 | 0:5.15.3-10.el8_10 | [RHSA-2026:93924](https://patchblox.com/security/data/fix/linux/rhsa-2026-93924.md) | Nov 3, 2026 |
| Linux | qt5-qtbase-odbc RHEL 9 | 0:5.15.9-11.el9_8.2 | [RHSA-2026:87082](https://patchblox.com/security/data/fix/linux/rhsa-2026-87082.md) | Oct 24, 2026 |
| Linux | qt5-qtbase-odbc almalinux 8 | 5.15.3-10.el8_10 | [ALSA-2026:93924](https://patchblox.com/security/data/fix/linux/alsa-2026-93924.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-odbc almalinux 9 | 5.15.9-11.el9_8.2 | [ALSA-2026:87082](https://patchblox.com/security/data/fix/linux/alsa-2026-87082.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-odbc ol 8 | 0:5.15.3-10.el8_10 | [ELSA-2026-93924](https://patchblox.com/security/data/fix/linux/elsa-2026-93924.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-odbc ol 9 | 0:5.15.9-11.el9_8.2 | [ELSA-2026-87082](https://patchblox.com/security/data/fix/linux/elsa-2026-87082.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-odbc-debuginfo Fedora 43 | 5.15.18-2.fc43 | [FEDORA-2026-D615EB3F43](https://patchblox.com/security/data/fix/linux/fedora-2026-d615eb3f43.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-postgresql Fedora 43 | 5.15.18-2.fc43 | [FEDORA-2026-D615EB3F43](https://patchblox.com/security/data/fix/linux/fedora-2026-d615eb3f43.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-postgresql RHEL 8 | 0:5.15.3-10.el8_10 | [RHSA-2026:93924](https://patchblox.com/security/data/fix/linux/rhsa-2026-93924.md) | Nov 3, 2026 |
| Linux | qt5-qtbase-postgresql RHEL 9 | 0:5.15.9-11.el9_8.2 | [RHSA-2026:87082](https://patchblox.com/security/data/fix/linux/rhsa-2026-87082.md) | Oct 24, 2026 |
| Linux | qt5-qtbase-postgresql almalinux 8 | 5.15.3-10.el8_10 | [ALSA-2026:93924](https://patchblox.com/security/data/fix/linux/alsa-2026-93924.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-postgresql almalinux 9 | 5.15.9-11.el9_8.2 | [ALSA-2026:87082](https://patchblox.com/security/data/fix/linux/alsa-2026-87082.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-postgresql ol 8 | 0:5.15.3-10.el8_10 | [ELSA-2026-93924](https://patchblox.com/security/data/fix/linux/elsa-2026-93924.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-postgresql ol 9 | 0:5.15.9-11.el9_8.2 | [ELSA-2026-87082](https://patchblox.com/security/data/fix/linux/elsa-2026-87082.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-postgresql-debuginfo Fedora 43 | 5.15.18-2.fc43 | [FEDORA-2026-D615EB3F43](https://patchblox.com/security/data/fix/linux/fedora-2026-d615eb3f43.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-private-devel Fedora 43 | 5.15.18-2.fc43 | [FEDORA-2026-D615EB3F43](https://patchblox.com/security/data/fix/linux/fedora-2026-d615eb3f43.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-private-devel RHEL 8 | 0:5.15.3-10.el8_10 | [RHSA-2026:93924](https://patchblox.com/security/data/fix/linux/rhsa-2026-93924.md) | Nov 3, 2026 |
| Linux | qt5-qtbase-private-devel RHEL 9 | 0:5.15.9-11.el9_8.2 | [RHSA-2026:87082](https://patchblox.com/security/data/fix/linux/rhsa-2026-87082.md) | Oct 24, 2026 |
| Linux | qt5-qtbase-private-devel almalinux 8 | 5.15.3-10.el8_10 | [ALSA-2026:93924](https://patchblox.com/security/data/fix/linux/alsa-2026-93924.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-private-devel almalinux 9 | 5.15.9-11.el9_8.2 | [ALSA-2026:87082](https://patchblox.com/security/data/fix/linux/alsa-2026-87082.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-private-devel ol 8 | 0:5.15.3-10.el8_10 | [ELSA-2026-93924](https://patchblox.com/security/data/fix/linux/elsa-2026-93924.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-private-devel ol 9 | 0:5.15.9-11.el9_8.2 | [ELSA-2026-87082](https://patchblox.com/security/data/fix/linux/elsa-2026-87082.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-static Fedora 43 | 5.15.18-2.fc43 | [FEDORA-2026-D615EB3F43](https://patchblox.com/security/data/fix/linux/fedora-2026-d615eb3f43.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-static RHEL 8 | 0:5.15.3-10.el8_10 | [RHSA-2026:93924](https://patchblox.com/security/data/fix/linux/rhsa-2026-93924.md) | Nov 3, 2026 |
| Linux | qt5-qtbase-static RHEL 9 | 0:5.15.9-11.el9_8.2 | [RHSA-2026:87082](https://patchblox.com/security/data/fix/linux/rhsa-2026-87082.md) | Oct 24, 2026 |
| Linux | qt5-qtbase-static almalinux 8 | 5.15.3-10.el8_10 | [ALSA-2026:93924](https://patchblox.com/security/data/fix/linux/alsa-2026-93924.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-static almalinux 9 | 5.15.9-11.el9_8.2 | [ALSA-2026:87082](https://patchblox.com/security/data/fix/linux/alsa-2026-87082.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-static ol 8 | 0:5.15.3-10.el8_10 | [ELSA-2026-93924](https://patchblox.com/security/data/fix/linux/elsa-2026-93924.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-static ol 9 | 0:5.15.9-11.el9_8.2 | [ELSA-2026-87082](https://patchblox.com/security/data/fix/linux/elsa-2026-87082.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-tds Fedora 43 | 5.15.18-2.fc43 | [FEDORA-2026-D615EB3F43](https://patchblox.com/security/data/fix/linux/fedora-2026-d615eb3f43.md) | Nov 7, 2026 |
| Linux | qt5-qtbase-tds-debuginfo Fedora 43 | 5.15.18-2.fc43 | [FEDORA-2026-D615EB3F43](https://patchblox.com/security/data/fix/linux/fedora-2026-d615eb3f43.md) | Nov 7, 2026 |
| Linux | qt6-base Debian 14 | 6.11.2+dfsg-5 | [DEBIAN-CVE-2026-19248](https://patchblox.com/security/data/fix/linux/debian-cve-2026-19248.md) | Sep 27, 2026 |
| Linux | qtbase-opensource-src Debian 14 | 5.15.19+dfsg-5 | [DEBIAN-CVE-2026-19248](https://patchblox.com/security/data/fix/linux/debian-cve-2026-19248.md) | Sep 27, 2026 |

---

Data as of 2026-11-08T13:06:02Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.