Qt / C++ infos

• Meet Clate: the First Design Tool for Real-World Experiences

  

  Clate Beta is out today, free for everyone. It's a no-code, AI-native UX design tool built for embedded and HMI applications, with QML under the hood, so designers can stay in control of the full user experience.

• Security advisory: CVE-2026-105946 Out-of-bounds read vulnerability in NTLM authentication handling impacts Qt

  An out-of-bounds read vulnerability in the Qt NTLM authentication handling of the Qt Network module has been discovered and has been assigned the CVE id CVE-2026-105946. Applications using QNetworkAccessManager or QTcpSocket that authenticate with NTLM, including through a proxy, are affected.

• Security advisory: CVE-2026-107590: Out-of-bounds write vulnerability in QTextCodec iconv-based encoding impacts Qt

  An out-of-bounds write vulnerability in the Qt QTextCodec iconv-based encoding of the Qt 5 Compatibility APIs module (Qt Core in Qt 5 and earlier) has been discovered and has been assigned the CVE id CVE-2026-107590.

• With Qt 6.12, the SkyMaterial is the limit

  

  Qt Quick 3D 6.12 introduces a new SkyMaterial QML type, and in this post we will explain what it is, how to use it and why you'd want to.
  
  SkyMaterial provides a way of writing custom fragment shader code to render a scene's sky, as well as computing image-based lighting (IBL) from it. This means the same sky acts as both the visible background and a light source for the scene. With it you can create a dynamic sky with a moving sun, day/night cycle, clouds, stars etc.
  
  QML properties set on the SkyMaterial type are automatically made available in the custom shader, and whenever a property is updated, the SkyMaterial re-renders itself. This is what makes it possible to have a dynamic sky. Since the rendering is happening on the GPU, the performance cost depends on the complexity of the shader and how often it is updated. It is possible to tweak certain quality and performance properties to fit your performance budget.
  
  To use SkyMaterial in your 3D scene you need to point the SceneEnvironment::skyMaterial property to your SkyMaterial object, and set SceneEnvironment::backgroundMode to SceneEnvironment.SkyMaterial.

• Qt 6.11.3 Released

  The last release from Qt 6.11 series, Qt 6.11.3, is now available for download. As a patch release, Qt 6.11.3 doesn’t introduce new features, but it delivers around 200 bug fixes, security improvements, and quality enhancements on top of Qt 6.11.2. For a full overview of the most notable changes, take a look at the Qt 6.11.3 release notes.

• Security advisory: CVE-2026-107472 Out-of-bounds read vulnerability in QTextCodec TSCII encoding impacts Qt

  QTextCodec TSCII encoding of the Qt 5 Compatibility APIs module (Qt Core in Qt 5 and earlier) has been discovered and has been assigned the CVE id CVE-2026-107472.

• Security advisory: CVE-2026-107157 Out-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt Framework

  An out-of-bounds read vulnerability in the Qt Framework CBOR parsing functionality (QCborValue::fromCbor()) of the Qt Core module has been discovered and has been assigned the CVE id CVE-2026-107157.

• Security advisory: CVE-2026-95620 Use-after-free vulnerability in QNetworkAccessManager HTTP/2 support impacts Qt

  A use-after-free vulnerability in the Qt QNetworkAccessManager HTTP/2 client support of the Qt Network module has been discovered and has been assigned the CVE id CVE-2026-95620.

• Security advisory: CVE-2026-16762 Denial-of-service vulnerability in the Qt Core QXmlStream parser (QXmlStreamReader) impacts Qt

  A denial-of-service vulnerability in the Qt Core QXmlStream parser (QXmlStreamReader) of the qtbase component has been discovered and has been assigned the CVE id CVE-2026-16762.

• Security advisory: CVE-2026-96432 - Null pointer dereference vulnerability in QNetworkAccessManager impacts Qt

  A null pointer dereference vulnerability in the Qt QNetworkAccessManager class of the Qt Network module has been discovered and has been assigned the CVE id CVE-2026-96432.