What is GHSA-8hqc-789f-9chh?

GHSA-8hqc-789f-9chh is a security advisory published by GitHub Security Advisories with Low severity. A malicious or compromised HTTP/2 server withholding SETTINGS ACK can send RST_STREAM on a...

Which CVE IDs does GHSA-8hqc-789f-9chh cover?

GHSA-8hqc-789f-9chh covers the following CVE IDs: CVE-2026-96432. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-8hqc-789f-9chhLow

A malicious or compromised HTTP/2 server withholding SETTINGS ACK can send RST_STREAM on a...

Vendor

GitHub Security Advisories

Published

October 26, 2026

Last Modified

October 26, 2026

🔗 CVE IDs covered (1)

CVE-2026-96432 →

📋 Description

A malicious or compromised HTTP/2 server withholding SETTINGS ACK can send RST_STREAM on a completed stream, planting a null pointer, and then send a PUSH_PROMISE for that stream, causing a null pointer dereference in the QNetworkAccessManager class of the Qt Network module that crashes the application.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-96432
https://codereview.qt-project.org/c/qt/qtbase/+/759718
https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-96432:
https://github.com/advisories/GHSA-8hqc-789f-9chh