CVE-2021-45930

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-45930
Qt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds write in QtPrivate::QCommonArrayOps<QPainterPath::Element>::growAppend (called from QPainterPath::addPath and QPathClipper::intersect).

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

4.3 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37025 Exploit Issue Tracking Third Party Advisory
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37306 Exploit Issue Tracking Third Party Advisory
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/qt/OSV-2021-1121.yaml Exploit Third Party Advisory
https://github.com/qt/qtsvg/commit/36cfd9efb9b22b891adee9c48d30202289cfa620 Patch Third Party Advisory
https://github.com/qt/qtsvg/commit/79bb9f51fa374106a612d17c9d98d35d807be670 Patch Third Party Advisory
https://github.com/qt/qtsvg/commit/a3b753c2d077313fc9eb93af547051b956e383fc Patch Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/01/msg00020.html Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/01/msg00022.html Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/08/msg00028.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4GKOKVCSDZSOWWR3HOW5XUIUJC4MKQY5/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GZIXNSX7FV733TWTTLY6FHSH3SCNQKKD/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V75XNX4GDB64N5BSOAN474RUXXS5OHRU/
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37025 Exploit Issue Tracking Third Party Advisory
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37306 Exploit Issue Tracking Third Party Advisory
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/qt/OSV-2021-1121.yaml Exploit Third Party Advisory
https://github.com/qt/qtsvg/commit/36cfd9efb9b22b891adee9c48d30202289cfa620 Patch Third Party Advisory
https://github.com/qt/qtsvg/commit/79bb9f51fa374106a612d17c9d98d35d807be670 Patch Third Party Advisory
https://github.com/qt/qtsvg/commit/a3b753c2d077313fc9eb93af547051b956e383fc Patch Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/01/msg00020.html Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/01/msg00022.html Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/08/msg00028.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4GKOKVCSDZSOWWR3HOW5XUIUJC4MKQY5/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GZIXNSX7FV733TWTTLY6FHSH3SCNQKKD/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V75XNX4GDB64N5BSOAN474RUXXS5OHRU/
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:qt:qtsvg:*:*:*:*:*:*:*:*
cpe:2.3:a:qt:qtsvg:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*

Configuration 3 (hide)

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
History

21 Nov 2024, 06:33

Type Values Removed Values Added
References () https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37025 - Exploit, Issue Tracking, Third Party Advisory () https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37025 - Exploit, Issue Tracking, Third Party Advisory
References () https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37306 - Exploit, Issue Tracking, Third Party Advisory () https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37306 - Exploit, Issue Tracking, Third Party Advisory
References () https://github.com/google/oss-fuzz-vulns/blob/main/vulns/qt/OSV-2021-1121.yaml - Exploit, Third Party Advisory () https://github.com/google/oss-fuzz-vulns/blob/main/vulns/qt/OSV-2021-1121.yaml - Exploit, Third Party Advisory
References () https://github.com/qt/qtsvg/commit/36cfd9efb9b22b891adee9c48d30202289cfa620 - Patch, Third Party Advisory () https://github.com/qt/qtsvg/commit/36cfd9efb9b22b891adee9c48d30202289cfa620 - Patch, Third Party Advisory
References () https://github.com/qt/qtsvg/commit/79bb9f51fa374106a612d17c9d98d35d807be670 - Patch, Third Party Advisory () https://github.com/qt/qtsvg/commit/79bb9f51fa374106a612d17c9d98d35d807be670 - Patch, Third Party Advisory
References () https://github.com/qt/qtsvg/commit/a3b753c2d077313fc9eb93af547051b956e383fc - Patch, Third Party Advisory () https://github.com/qt/qtsvg/commit/a3b753c2d077313fc9eb93af547051b956e383fc - Patch, Third Party Advisory
References () https://lists.debian.org/debian-lts-announce/2022/01/msg00020.html - Mailing List, Third Party Advisory () https://lists.debian.org/debian-lts-announce/2022/01/msg00020.html - Mailing List, Third Party Advisory
References () https://lists.debian.org/debian-lts-announce/2022/01/msg00022.html - Mailing List, Third Party Advisory () https://lists.debian.org/debian-lts-announce/2022/01/msg00022.html - Mailing List, Third Party Advisory
References () https://lists.debian.org/debian-lts-announce/2023/08/msg00028.html - () https://lists.debian.org/debian-lts-announce/2023/08/msg00028.html -
References () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4GKOKVCSDZSOWWR3HOW5XUIUJC4MKQY5/ - () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4GKOKVCSDZSOWWR3HOW5XUIUJC4MKQY5/ -
References () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GZIXNSX7FV733TWTTLY6FHSH3SCNQKKD/ - () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GZIXNSX7FV733TWTTLY6FHSH3SCNQKKD/ -
References () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V75XNX4GDB64N5BSOAN474RUXXS5OHRU/ - () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V75XNX4GDB64N5BSOAN474RUXXS5OHRU/ -

07 Nov 2023, 03:39

Type Values Removed Values Added
References
  • {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4GKOKVCSDZSOWWR3HOW5XUIUJC4MKQY5/', 'name': 'FEDORA-2022-56f583fd79', 'tags': ['Mailing List', 'Third Party Advisory'], 'refsource': 'FEDORA'}
  • {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GZIXNSX7FV733TWTTLY6FHSH3SCNQKKD/', 'name': 'FEDORA-2022-1e29b8997a', 'tags': ['Mailing List', 'Third Party Advisory'], 'refsource': 'FEDORA'}
  • {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V75XNX4GDB64N5BSOAN474RUXXS5OHRU/', 'name': 'FEDORA-2022-8e3fbc74e9', 'tags': ['Mailing List', 'Third Party Advisory'], 'refsource': 'FEDORA'}
  • () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GZIXNSX7FV733TWTTLY6FHSH3SCNQKKD/ -
  • () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V75XNX4GDB64N5BSOAN474RUXXS5OHRU/ -
  • () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4GKOKVCSDZSOWWR3HOW5XUIUJC4MKQY5/ -

23 Aug 2023, 01:15

Type Values Removed Values Added
References
  • (MLIST) https://lists.debian.org/debian-lts-announce/2023/08/msg00028.html -
Information

Published : 2022-01-01 01:15

Updated : 2024-11-21 06:33

NVD link : CVE-2021-45930

Mitre link : CVE-2021-45930

CVE.ORG link : CVE-2021-45930

JSON object : View

Products Affected

debian

  • debian_linux

fedoraproject

  • fedora

qt

  • qtsvg
CWE
CWE-787

Out-of-bounds Write


NetmanageIT Website NetmanageIT OSINT Web NetmanageIT OpenCTI NetmanageIT PDF Tools NetmanageIT CTO Corner Blog NetmanageIT Email Header Analyzer NetmanageIT Password Pusher NetmanageIT Internet Health and Latency Dashboard NetmanageIT Dedicated Speed Test Site NetmanageIT Ubuntu Mirror 10Gbps Copyright OpenCVE 2024