CVE-2021-45930
CVE-2021-45930
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Qt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds write in QtPrivate::QCommonArrayOps<QPainterPath::Element>::growAppend (called from QPainterPath::addPath and QPathClipper::intersect).
CVSS 5.5 · Media · EPSS 1,5% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
qtsvg-opensource-src Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 5.15.2-4
Actualiza a 5.15.2-4
qtsvg-opensource-src Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 5.15.2-4
Actualiza a 5.15.2-4
qtsvg-opensource-src Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 5.15.2-4
Actualiza a 5.15.2-4
qtsvg-opensource-src Ubuntu:Pro:16.04:LTS
- Versiones
- 5.4.2-2build1
- 5.5.1-2build1
- Intervalos de versiones afectados
- ECOSYSTEM: < 5.5.1-2ubuntu0.1~esm1
Actualiza a 5.5.1-2ubuntu0.1~esm1
qtsvg-opensource-src Ubuntu:18.04:LTS
- Versiones
- 5.9.1-2
- 5.9.2-2
- 5.9.2-3
- 5.9.3-0ubuntu1
- 5.9.4-0ubuntu1
- 5.9.5-0ubuntu1
- Intervalos de versiones afectados
- ECOSYSTEM: < 5.9.5-0ubuntu1.1
Actualiza a 5.9.5-0ubuntu1.1
qtsvg-opensource-src Ubuntu:Pro:20.04:LTS
- Versiones
- 5.12.4-1
- 5.12.5-2
- 5.12.5-2build1
- 5.12.8-0ubuntu1
- Intervalos de versiones afectados
- ECOSYSTEM: < 5.12.8-0ubuntu1+esm1
Actualiza a 5.12.8-0ubuntu1+esm1
Fuentes originales
- https://github.com/google/oss-fuzz-vulns/blob/main/vulns/qt/OSV-2021-1121.yaml
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37025
- https://github.com/qt/qtsvg/commit/a3b753c2d077313fc9eb93af547051b956e383fc
- https://github.com/qt/qtsvg/commit/79bb9f51fa374106a612d17c9d98d35d807be670
- https://github.com/qt/qtsvg/commit/36cfd9efb9b22b891adee9c48d30202289cfa620
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37306
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V75XNX4GDB64N5BSOAN474RUXXS5OHRU/
- https://lists.debian.org/debian-lts-announce/2022/01/msg00020.html
- https://lists.debian.org/debian-lts-announce/2022/01/msg00022.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4GKOKVCSDZSOWWR3HOW5XUIUJC4MKQY5/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GZIXNSX7FV733TWTTLY6FHSH3SCNQKKD/
- https://lists.debian.org/debian-lts-announce/2023/08/msg00028.html
- https://nvd.nist.gov/vuln/detail/CVE-2021-45930