Out-of-bounds write in QtPrivate::QCommonArrayOps<QPainterPath::Element>::growAppend (CVE-2021-45930) QtSvg QSvgFont m_unitsPerEm initialization is mishandled. (CVE-2023-32573)