CVE Catalog

CVE-2026-51106

CriticalCVSS 9.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.13%

3th percentile - higher than 3% of all known CVEs

Summary

An issue in TokTok qTox v1.18.4 allows a local attacker to cause a denial of service via the src/persistence/serialize.cpp component.

Risk Assessment

A local attacker can cause an application crash, potentially disrupting user communication and leading to service unavailability.

Recommendation

Update qTox to the latest version that includes a fix for this vulnerability. Restrict local access to the system if possible.

Original NVD description (English source)

An issue in TokTok qTox v1.18.4 allows a local attacker to cause a denial of service via the src/persistence/serialize.cpp component

Vulnerability data from NVD (NIST) · CISA KEV · EPSS