CVE-2026-13326

An out-of-bounds read in Qt NFC's language code length parsing allows a physically proximate attacker to cause a denial of service or limited memory disclosure via a crafted NFC tag.

  • Published Sep 11, 2026
  • CVSS 6.9 medium
  • 0.2% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-13326 at the National Vulnerability Database