CVE-2021-28025

Integer Overflow vulnerability in qsvghandler.cpp in Qt qtsvg versions 5.15.1, 6.0.0, 6.0.2, and 6.2, allows local attackers to cause a denial of service (DoS).

References

https://bugreports.qt.io/browse/QTBUG-91507

Affected packages

Git / github.com/qt/qt5

Affected ranges

Type: GIT
Repo: https://github.com/qt/qt5
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

027f659e4490e53214105f3b980e410053605488

Last affected

2a036a7594e6689d18be65e8a75ef23abb412bbc

Last affected

3a4502ae3d411795a42abfda67a2cfba886932df

Last affected

46dddf87bcb154432533083cf2bfebb3d4b3e3f7

Last affected

586856e180b65470d0e5d119081e18abbde83152

Last affected

5dc2c5d94fd4ae203b81152e5bf9b311a9b88611

Last affected

61d6a120dccb48e6bff78c4b5bf8913916416689

Last affected

6e42fc3e0ac27d97e6233cafa65c1cb8b1ac15c7

Last affected

76741ceaa506518580f0d397f4105c2a8ab29b4a

Last affected

78410d7e8b7aafdcbb4feea3a943038c7e0a0b5f

Last affected

97baab98faac7f16400e224dcc5c6b81343ba9f0

Last affected

ab311180ba1be896031d6cc5df29f24e5150ec9a

Last affected

c3589e86f90a32a070f93e12cd149566d7e3f471

Last affected

dd11f01de7416b650b58c13e18146533d764477c

Last affected

e3e388d76cf397282e2934705a681852b6e528ff

Last affected

e9e821038c9ff9725e03a0c2d871075dd7d562a4

Last affected

eea5f47027ea50670619904dd45b7bbbbb55af38

Last affected

f641b7112e8083dd667b9ac97babd1f8b923c828

Affected versions

qt-v5.*

qt-v5.0.0-alpha1

v5.*

v5.0.0-beta1

v5.1.0-alpha1

v5.1.0-beta1

v5.1.0-rc1

v5.10.0

v5.10.0-alpha1

v5.10.0-beta1

v5.10.0-beta2

v5.10.0-beta3

v5.10.0-beta4

v5.10.0-rc1

v5.10.0-rc2

v5.10.0-rc3

v5.10.1

v5.11.0

v5.11.0-alpha1

v5.11.0-beta1

v5.11.0-beta2

v5.11.0-beta3

v5.11.0-beta4

v5.11.0-rc1

v5.11.0-rc2

v5.11.1

v5.11.2

v5.11.3

v5.12.0

v5.12.0-alpha1

v5.12.0-beta1

v5.12.0-beta2

v5.12.0-beta3

v5.12.0-beta4

v5.12.0-rc1

v5.12.0-rc2

v5.12.1

v5.12.2

v5.12.3

v5.12.4

v5.12.5

v5.13.0

v5.13.0-alpha1

v5.13.0-beta1

v5.13.0-beta2

v5.13.0-beta3

v5.13.0-beta4

v5.13.0-rc1

v5.13.0-rc2

v5.13.0-rc3

v5.13.1

v5.14.0

v5.14.0-alpha1

v5.14.0-beta1

v5.14.0-beta2

v5.14.0-beta3

v5.14.0-rc1

v5.14.0-rc2

v5.14.1

v5.14.2

v5.15.0

v5.15.0-alpha1

v5.15.0-beta1

v5.15.0-beta2

v5.15.0-beta3

v5.15.0-beta4

v5.15.0-rc1

v5.15.0-rc2

v5.15.1

v5.2.0-alpha1

v5.2.0-beta1

v5.3.0-alpha1

v5.3.0-beta1

v5.4.0

v5.4.0-alpha1

v5.4.0-beta1

v5.4.0-rc1

v5.4.1

v5.4.2

v5.5.0-alpha1

v5.5.0-beta1

v5.6.0

v5.6.0-alpha1

v5.6.0-beta1

v5.6.0-rc1

v5.6.2

v5.6.3

v5.7.0-alpha1

v5.7.0-beta1

v5.7.0-rc1

v5.8.0

v5.8.0-alpha1

v5.8.0-beta1

v5.8.0-rc1

v5.9.0-alpha1

v5.9.0-beta1

v5.9.0-beta2

v5.9.0-beta3

v5.9.0-beta4

v5.9.0-rc1

v5.9.1

v5.9.2

v5.9.3

v5.9.4

v6.*

v6.0.0-alpha1

v6.0.0-beta1

v6.0.0-beta2

v6.0.0-beta3

v6.0.0-beta4

v6.0.0-beta5

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-28025.json"

Git / github.com/qt/qtbase