CVE-2021-3481

State: Published
Severity: Not scored
Published: Aug 22, 2022
Updated: Aug 3, 2024
Reserved: Apr 1, 2021

Description

A flaw was found in Qt. An out-of-bounds read vulnerability was found in QRadialFetchSimd in qt/qtbase/src/gui/painting/qdrawhelper_p.h in Qt/Qtbase. While rendering and displaying a crafted Scalable Vector Graphics (SVG) file this flaw may lead to an unauthorized memory access. The highest threat from this vulnerability is to data confidentiality and the application availability.

Scores

The record has no CVSS score.

Weaknesses

CWE-125 Out-of-bounds Read

Affected Products

Product	Versions
qtn/a	Fixed in qt 5.12.11, qt 5.15.4, qt 6.0.3, qt 6.1.0RC.Affected

References

https://bugreports.qt.io/browse/QTBUG-91507
https://codereview.qt-project.org/c/qt/qtsvg/+/337646
https://bugzilla.redhat.com/show_bug.cgi?id=1931444
https://access.redhat.com/security/cve/CVE-2021-3481
[debian-lts-announce] 20230822 [SECURITY] [DLA 3539-1] qt4-x11 security updatemailing-list

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.