CVE-2021-28025

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-28025
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-28025.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2021-28025
Downstream
Published
2023-08-11T14:15:12.453Z
Modified
2026-04-12T00:10:05.196726Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

Integer Overflow vulnerability in qsvghandler.cpp in Qt qtsvg versions 5.15.1, 6.0.0, 6.0.2, and 6.2, allows local attackers to cause a denial of service (DoS).

References

Affected packages

Git / github.com/qt/qtbase

Affected ranges

Type
GIT
Repo
https://github.com/qt/qtbase
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e4961b35deb202525d4711dbb14f8c2bb0bf5c26
Last affected
fc9cda5f08ac848e88f63dd4a07c08b2fbc6bf17
Last affected
8059632fbdd656a4892918745244fd84a746ee93
Last affected
86d2f7f365c35f9833f3cf5c5731a8c258ad8ec4
Last affected
b6cd3bca280bd81e932ff51a3ec2b9fc70231646
Last affected
8040d3dce12a7c0ccc71dd1e1f2f018fdbcbf4dc
Last affected
3c3c5778e2a1c86a8492ae635844f5b8a553a571
Last affected
d8efe51303a08e93240766c620d2a7be3df0dd04
Last affected
bcd38a96149f5397375b57e948c05c7a8f172194
Last affected
95730dd19cddd65588c902255513517556afc49f
Last affected
723077eb3529810aa3b99d8c06f9b81a586763c9
Last affected
322f7c5a49c5666f816d6783717661a25e7a121a
Last affected
f57bfa3ba0b3cc6a4f53eebebbe16c0e41ccee3a
Last affected
55b2a1e4fc7c3fc1369c0832c375af056eef1eea
Last affected
ff31815659cf4e2d2ce50795f8bd665fd02f9389
Last affected
8ec406b2296abdbdc8606fa955a2f8feb5254b1f
Last affected
a1f6721fc8874d0c15b723db9908d090cd422585
Last affected
28792da875a101a93a1b32946c74d37e7f2bbd6b
Database specific 
{
    "cpe": [
        "cpe:2.3:a:qt:qt:5.15.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:qt:qt:6.0.0:-:*:*:*:*:*:*",
        "cpe:2.3:a:qt:qt:6.0.0:alpha1:*:*:*:*:*:*",
        "cpe:2.3:a:qt:qt:6.0.0:beta1:*:*:*:*:*:*",
        "cpe:2.3:a:qt:qt:6.0.0:beta2:*:*:*:*:*:*",
        "cpe:2.3:a:qt:qt:6.0.0:beta3:*:*:*:*:*:*",
        "cpe:2.3:a:qt:qt:6.0.0:beta4:*:*:*:*:*:*",
        "cpe:2.3:a:qt:qt:6.0.0:beta5:*:*:*:*:*:*",
        "cpe:2.3:a:qt:qt:6.0.0:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:qt:qt:6.0.0:rc2:*:*:*:*:*:*",
        "cpe:2.3:a:qt:qt:6.0.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:qt:qt:6.2.0:alpha1:*:*:*:*:*:*",
        "cpe:2.3:a:qt:qt:6.2.0:beta1:*:*:*:*:*:*",
        "cpe:2.3:a:qt:qt:6.2.0:beta2:*:*:*:*:*:*",
        "cpe:2.3:a:qt:qt:6.2.0:beta3:*:*:*:*:*:*",
        "cpe:2.3:a:qt:qt:6.2.0:beta4:*:*:*:*:*:*",
        "cpe:2.3:a:qt:qt:6.2.0:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:qt:qt:6.2.0:rc2:*:*:*:*:*:*"
    ],
    "source": "CPE_FIELD",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.15.1"
        },
        {
            "last_affected": "6.0.0-NA"
        },
        {
            "last_affected": "6.0.0-alpha1"
        },
        {
            "last_affected": "6.0.0-beta1"
        },
        {
            "last_affected": "6.0.0-beta2"
        },
        {
            "last_affected": "6.0.0-beta3"
        },
        {
            "last_affected": "6.0.0-beta4"
        },
        {
            "last_affected": "6.0.0-beta5"
        },
        {
            "last_affected": "6.0.0-rc1"
        },
        {
            "last_affected": "6.0.0-rc2"
        },
        {
            "last_affected": "6.0.2"
        },
        {
            "last_affected": "6.2.0-alpha1"
        },
        {
            "last_affected": "6.2.0-beta1"
        },
        {
            "last_affected": "6.2.0-beta2"
        },
        {
            "last_affected": "6.2.0-beta3"
        },
        {
            "last_affected": "6.2.0-beta4"
        },
        {
            "last_affected": "6.2.0-rc1"
        },
        {
            "last_affected": "6.2.0-rc2"
        }
    ]
}

Affected versions

v5.*
v5.0.0-beta1
v5.0.0-beta2
v5.15.0-alpha1
v5.15.0-beta1
v5.15.0-beta2
v5.15.0-beta3
v5.15.0-beta4
v5.15.1
v6.*
v6.0.0
v6.0.0-alpha1
v6.0.0-beta1
v6.0.0-beta2
v6.0.0-beta3
v6.0.0-beta4
v6.0.0-beta5
v6.0.0-rc1
v6.0.0-rc2
v6.0.1
v6.0.2
v6.2.0-alpha1
v6.2.0-beta1
v6.2.0-beta2
v6.2.0-beta3
v6.2.0-beta4
v6.2.0-rc1
v6.2.0-rc2

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-28025.json"