CVE-2021-45930
published 2022-01-01CVE-2021-45930: Qt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds write in QtPrivate::QCommonArrayOps::growAppend (called from…
PriorityP421medium5.5CVSS 3.1
AVLACLPRNUIRSUCNINAH
EPSS
1.34%
68.2th percentile
Qt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds write in QtPrivate::QCommonArrayOps::growAppend (called from QPainterPath::addPath and QPathClipper::intersect).
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | qtsvg-opensource-src | < qtsvg-opensource-src 5.15.2-4 (bookworm) | qtsvg-opensource-src 5.15.2-4 (bookworm) |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| qt | qtsvg | 5.0.0 – 5.15.2 | — |
| qt | qtsvg | 6.0.0 – 6.2.1 | — |
| ubuntu | qtsvg-opensource-src | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
osv5.5MEDIUM
vendor_ubuntu6.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-66fw-grvj-p2h2: Qt SVG in Qt 5
ghsa_unreviewed·2022-02-08
CVE-2021-45930 [MEDIUM] CWE-787 GHSA-66fw-grvj-p2h2: Qt SVG in Qt 5
Qt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds write in QtPrivate::QCommonArrayOps::growAppend (called from QPainterPath::addPath and QPathClipper::intersect).
OSV
CVE-2021-45930: Qt SVG in Qt 5
osv·2022-01-01·CVSS 5.5
CVE-2021-45930 [MEDIUM] CVE-2021-45930: Qt SVG in Qt 5
Qt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds write in QtPrivate::QCommonArrayOps::growAppend (called from QPainterPath::addPath and QPathClipper::intersect).
Ubuntu
QtSvg vulnerabilities
vendor_ubuntu·2026-05-28·CVSS 6.5
CVE-2023-32573 [MEDIUM] QtSvg vulnerabilities
Title: QtSvg vulnerabilities
Summary: Several security issues were fixed in QtSvg.
It was discovered that QtSvg incorrectly handled certain SVG images. An
attacker could possibly use this issue to cause QtSvg to crash, resulting in
a denial of service. This issue only affected Ubuntu 16.04 LTS.
(CVE-2018-19869)
It was discovered that QtSvg incorrectly handled certain SVG images. An
attacker could use this issue to cause QtSvg to crash, resulting in a
denial of service, or possibly execute arbitrary code. This issue only
affected Ubuntu 16.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-3481,
CVE-2021-28025, CVE-2021-45930)
It was discovered that QtSvg incorrectly handled certain SVG images. An
attacker could use this issue to cause QtSvg to crash, resulting in a
denial of service, or possibly e
Ubuntu
QtSvg vulnerabilities
vendor_ubuntu·2022-01-19
CVE-2018-19869 QtSvg vulnerabilities
Title: QtSvg vulnerabilities
Summary: Several security issues were fixed in QtSvg.
It was discovered that QtSvg incorrectly handled certain malformed SVG
images. If a user or automated system were tricked into opening a specially
crafted image file, a remote attacker could use this issue to cause QtSvg
to crash, resulting in a denial of service, or possibly execute arbitrary
code.
Instructions: In general, a standard system update will make all the necessary changes.
Red Hat
qt: out-of-bounds write may lead to DoS
vendor_redhat·2021-12-31·CVSS 5.5
CVE-2021-45930 [MEDIUM] CWE-787 qt: out-of-bounds write may lead to DoS
qt: out-of-bounds write may lead to DoS
Qt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds write in QtPrivate::QCommonArrayOps::growAppend (called from QPainterPath::addPath and QPathClipper::intersect).
A flaw was found in qtsvg's qsvghandler.cpp module. An attacker who is able to submit a crafted image file to an application that uses qsvghandler could cause an out-of-bounds write and potential denial of service to occur, depending on the application.
Statement: This flaw is out of support scope for versions of qt shipped with Red Hat Enterprise Linux 6 and 7 as it does not affect qt3, which does not have the qsvghandler.
Package: qt (Red Hat Enterprise Linux 6) - Out of support scope
Package: qt3 (Red Hat Enterprise Linux 6) - Not affected
Package: qt (
Debian
CVE-2021-45930: qtsvg-opensource-src - Qt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds w...
vendor_debian·2021·CVSS 5.5
CVE-2021-45930 [MEDIUM] CVE-2021-45930: qtsvg-opensource-src - Qt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds w...
Qt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds write in QtPrivate::QCommonArrayOps::growAppend (called from QPainterPath::addPath and QPathClipper::intersect).
Scope: local
bookworm: resolved (fixed in 5.15.2-4)
bullseye: open
forky: resolved (fixed in 5.15.2-4)
sid: resolved (fixed in 5.15.2-4)
trixie: resolved (fixed in 5.15.2-4)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37025https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37306https://github.com/google/oss-fuzz-vulns/blob/main/vulns/qt/OSV-2021-1121.yamlhttps://github.com/qt/qtsvg/commit/36cfd9efb9b22b891adee9c48d30202289cfa620https://github.com/qt/qtsvg/commit/79bb9f51fa374106a612d17c9d98d35d807be670https://github.com/qt/qtsvg/commit/a3b753c2d077313fc9eb93af547051b956e383fchttps://lists.debian.org/debian-lts-announce/2022/01/msg00020.htmlhttps://lists.debian.org/debian-lts-announce/2022/01/msg00022.htmlhttps://lists.debian.org/debian-lts-announce/2023/08/msg00028.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4GKOKVCSDZSOWWR3HOW5XUIUJC4MKQY5/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GZIXNSX7FV733TWTTLY6FHSH3SCNQKKD/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V75XNX4GDB64N5BSOAN474RUXXS5OHRU/https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37025https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37306https://github.com/google/oss-fuzz-vulns/blob/main/vulns/qt/OSV-2021-1121.yamlhttps://github.com/qt/qtsvg/commit/36cfd9efb9b22b891adee9c48d30202289cfa620https://github.com/qt/qtsvg/commit/79bb9f51fa374106a612d17c9d98d35d807be670https://github.com/qt/qtsvg/commit/a3b753c2d077313fc9eb93af547051b956e383fchttps://lists.debian.org/debian-lts-announce/2022/01/msg00020.htmlhttps://lists.debian.org/debian-lts-announce/2022/01/msg00022.htmlhttps://lists.debian.org/debian-lts-announce/2023/08/msg00028.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4GKOKVCSDZSOWWR3HOW5XUIUJC4MKQY5/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GZIXNSX7FV733TWTTLY6FHSH3SCNQKKD/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V75XNX4GDB64N5BSOAN474RUXXS5OHRU/
2022-01-01
Published