CVE-2021-3481

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-3481
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-3481.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2021-3481
Downstream
Related
Published
2022-08-22T15:15:13.363Z
Modified
2026-04-16T00:04:40.260702035Z
Severity
  • 7.1 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H CVSS Calculator
Summary
[none]
Details

A flaw was found in Qt. An out-of-bounds read vulnerability was found in QRadialFetchSimd in qt/qtbase/src/gui/painting/qdrawhelper_p.h in Qt/Qtbase. While rendering and displaying a crafted Scalable Vector Graphics (SVG) file this flaw may lead to an unauthorized memory access. The highest threat from this vulnerability is to data confidentiality and the application availability.

References

Affected packages

Git / github.com/qt/qtbase

Affected ranges

Type
GIT
Repo
https://github.com/qt/qtbase
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e4961b35deb202525d4711dbb14f8c2bb0bf5c26
Last affected
fc9cda5f08ac848e88f63dd4a07c08b2fbc6bf17
Last affected
723077eb3529810aa3b99d8c06f9b81a586763c9
Last affected
cc60cf83db6bbf9775b1f7747a48d6b7eb24e585
Database specific 
{
    "source": "CPE_FIELD",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.15.1"
        },
        {
            "last_affected": "6.0.0-NA"
        },
        {
            "last_affected": "6.0.2"
        },
        {
            "last_affected": "6.2.0-NA"
        }
    ],
    "cpe": [
        "cpe:2.3:a:qt:qt:5.15.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:qt:qt:6.0.0:-:*:*:*:*:*:*",
        "cpe:2.3:a:qt:qt:6.0.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:qt:qt:6.2.0:-:*:*:*:*:*:*"
    ]
}

Affected versions

v5.*
v5.0.0-beta1
v5.0.0-beta2
v5.15.0-alpha1
v5.15.0-beta1
v5.15.0-beta2
v5.15.0-beta3
v5.15.0-beta4
v5.15.1
v6.*
v6.0.0
v6.0.0-alpha1
v6.0.0-beta1
v6.0.0-beta2
v6.0.0-beta3
v6.0.0-beta4
v6.0.0-beta5
v6.0.0-rc1
v6.0.0-rc2
v6.0.1
v6.0.2
v6.2.0
v6.2.0-alpha1
v6.2.0-beta1
v6.2.0-beta2
v6.2.0-beta3
v6.2.0-beta4
v6.2.0-rc1
v6.2.0-rc2

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-3481.json"