p PatchFirst

CVE-2021-38593

CVE-2021-38593

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Qt 5.x before 5.15.6 and 6.x through 6.1.2 has an out-of-bounds write in QOutlineMapper::convertPath (called from QRasterPaintEngine::fill and QPaintEngineEx::stroke).

CVSS 7.5 · High · EPSS 3.0% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • qtbase-opensource-src-gles Ubuntu:16.04:LTS

    Versions
    • 5.4.2+dfsg-2ubuntu9
    • 5.5.1+dfsg-6ubuntu1
    • 5.5.1+dfsg-10ubuntu1
    • 5.5.1+dfsg-13ubuntu1
    • 5.5.1+dfsg-13ubuntu2
    • 5.5.1+dfsg-13ubuntu3
    • 5.5.1+dfsg-14ubuntu1
    • 5.5.1+dfsg-14ubuntu2
    • 5.5.1+dfsg-14ubuntu3
    • 5.5.1+dfsg-15ubuntu1
    • 5.5.1+dfsg-16ubuntu1
    • 5.5.1+dfsg-16ubuntu4
    • 5.5.1+dfsg-16ubuntu5
    • 5.5.1+dfsg-16ubuntu6
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qtbase-opensource-src Ubuntu:18.04:LTS

    Versions
    • 5.9.1+dfsg-10ubuntu1
    • 5.9.1+dfsg-10ubuntu2
    • 5.9.2+dfsg-4ubuntu6
    • 5.9.3+dfsg-0ubuntu1
    • 5.9.3+dfsg-0ubuntu3
    • 5.9.3+dfsg-0ubuntu4
    • 5.9.4+dfsg-0ubuntu3
    • 5.9.4+dfsg-0ubuntu4
    • 5.9.5+dfsg-0ubuntu1
    • 5.9.5+dfsg-0ubuntu2
    • 5.9.5+dfsg-0ubuntu2.1
    • 5.9.5+dfsg-0ubuntu2.3
    • 5.9.5+dfsg-0ubuntu2.4
    • 5.9.5+dfsg-0ubuntu2.5
    Affected ranges
    • ECOSYSTEM: < 5.9.5+dfsg-0ubuntu2.6

    Update to 5.9.5+dfsg-0ubuntu2.6

  • qtbase-opensource-src Ubuntu:20.04:LTS

    Versions
    • 5.12.4+dfsg-4ubuntu1
    • 5.12.5+dfsg-2
    • 5.12.5+dfsg-8
    • 5.12.5+dfsg-8build1
    • 5.12.5+dfsg-9build1
    • 5.12.8+dfsg-0ubuntu1
    Affected ranges
    • ECOSYSTEM: < 5.12.8+dfsg-0ubuntu2.1

    Update to 5.12.8+dfsg-0ubuntu2.1

  • qtbase-opensource-src-gles Ubuntu:20.04:LTS

    Versions
    • 5.12.4+dfsg-1build1
    • 5.12.5+dfsg-1
    • 5.12.5+dfsg-2
    • 5.12.8+dfsg-0ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qtbase-opensource-src-gles Ubuntu:22.04:LTS

    Versions
    • 5.15.2+dfsg-4
    • 5.15.2+dfsg-5
    • 5.15.3+dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qtbase-opensource-src-gles Ubuntu:24.04:LTS

    Versions
    • 5.15.10+dfsg-2
    • 5.15.10+dfsg-3
    • 5.15.12+dfsg-1
    • 5.15.12+dfsg-1ubuntu1
    • 5.15.12+dfsg-1ubuntu2
    • 5.15.13+dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qtbase-opensource-src-gles Ubuntu:25.10

    Versions
    • 5.15.15+dfsg-2
    • 5.15.17+dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qtbase-opensource-src-gles Ubuntu:26.10

    Versions
    • 5.15.18+dfsg-1
    • 5.15.19+dfsg-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qtbase-opensource-src-gles Ubuntu:26.04:LTS

    Versions
    • 5.15.17+dfsg-1
    • 5.15.17+dfsg-2
    • 5.15.18+dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →