Qt / C++ infos

• Security advisory: CVE-2026-19248: Unbounded recursion vulnerability in the QDomNode destructor of Qt XML impacts Qt

  Unbounded destructor recursion in the QDomNode destructor of Qt XML has been discovered and has been assigned the CVE id CVE-2026-19248. 

• Security advisory: CVE-2026-13326 Out-of-bounds read and integer underflow vulnerability in QNdefNfcTextRecord impacts Qt NFC module

  An out-of-bounds read and integer underflow vulnerability in the QNdefNfcTextRecord class of the Qt NFC module (qtconnectivity) has been discovered and has been assigned the CVE id CVE-2026-13326. 

• Security advisory: CVE-2026-11573 Uncontrolled recursion in QDomDocument serialization

  Updated 11 September 2026: the affected version range in this advisory has been corrected. It originally read "from 6.7.0 to 6.8.1". Further source review established that the recursive serialization code has been present since Qt 2.2.0, so all Qt versions before the fixed releases listed below are affected. The CVE record has been updated accordingly. The severity assessment and CVSS score are unchanged.  
  
   An uncontrolled recursion (CWE-674) vulnerability in the Qt QDomDocument serialization path of the Qt XML module (QtXml, qtbase) has been discovered and has been assigned the CVE id CVE-2026-11573. The affected code is reachable through QDomDocument::toByteArray() (Qt 4.0 and later), QDomDocument::toString(), QDomDocument::toCString(), QDomNode::save(), and operator<<(QTextStream&, const QDomNode&). 

• Qt Design Studio 4.8.3 Released

  

  Qt Design Studio 4.8.3 Is Here!

  Qt Design Studio 4.8.3 is a maintenance release that builds on foundations of 4.8.2: a round of improvements to the Figma design workflow from both ends of the pipeline, fixes to property editing for Qt for MCUs projects, and a refreshed set of AI models.

  Qt Bridge

  The Qt Bridge importer now retains the settings from your last import, remembering both the import options and the path, so bringing in an updated design no longer means re-entering the target directory and re-picking your options every time. Alongside that, a handful of correctness fixes improve the QML that comes out of an import: colors are no longer added to plain Items, master components get proper default values for aliasing, inner attached property overrides are no longer propagated since QML does not support this, and imported UIID names no longer get an _instance suffix appended. 

• Qt AI Assistant Retires As We Invest in Agentic Development Tools

  The Way Developers Use AI Has Changed

  When Qt AI Assistant was introduced, the state of the art in AI-powered software development was the single-turn prompt: select a block of code, ask for a test case, an explanation, or some boilerplate QML, and review the result.

• Qt Extension 1.16.0 for VS Code Released

  

  We're excited to announce the release of version 1.16.0 of the Qt Extension for Visual Studio Code! This release brings:

  • QML Profiler and Trace Viewer to profile your QML applications directly from VS Code
  • A new Welcome page with browsers for Qt examples and Qt Academy courses
  • Better PySide support with QML Live Preview and uv virtual environments

• Qt Safe Renderer 2.2.0 Released and Certified!

  

  We are happy to announce the release and certification of Qt Safe Renderer (QSR) 2.2.0! The QSR 2.2.0 release is available for commercial customers with a Device Creation Enterprise license.

• Qt 6.11.2 Released

  Qt 6.11.2 is now available for download. As a patch release, Qt 6.11.2 doesn’t introduce new features, but it delivers around 400 bug fixes, security improvements, and quality enhancements on top of Qt 6.11.1. For a full overview of the most notable changes, take a look at the Qt 6.11.2 release notes.

• Qt Creator 20.0.1 released

  We are happy to announce the release of Qt Creator 20.0.1!

  The release improves tool detection and the default session directory for chats in the AI Agent Client Protocol integration, fixes various issues with CMake Presets as well as some crashes, and contains various other improvements.

• Python Mobile App Development: Bringing PySide6 on iOS

  

  Python mobile app development reaches iOS in Qt 6.12. PySide6 developers can ship native iOS apps from the same codebase they already use for Android and desktop, with no Swift or Objective-C rewrite and no second codebase to keep in sync.