Qt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds write in QtPrivate::QCommonArrayOps<QPainterPath::Element>::growAppend (called from QPainterPath::addPath and QPathClipper::intersect).
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade qt5-qtsvg-examplesUpgrade qt5-qtsvgUpgrade qt5-qtsvg-devel | May 13, 2022 | Jan 1, 2022 |
| Amazon Linux Ami 2 | — | Upgrade qt5-qtsvg-debuginfoUpgrade qt5-qtsvg-examplesUpgrade qt5-qtsvg-develUpgrade qt5-qtsvgUpgrade qt5-qtsvg-doc | Mar 7, 2023 | Jan 1, 2022 |
| Centos_linux | — | Upgrade qt5-qtsvgUpgrade qt5-qtsvg-examplesUpgrade qt5-qtsvg-tests-debuginfoUpgrade qt5-qtsvg-debuginfoUpgrade qt5-qtsvg-debugsourceUpgrade qt5-qtsvg-examples-debuginfoUpgrade qt5-qtsvg-devel | May 13, 2022 | Jan 1, 2022 |
| Debian | — | Upgrade qtsvg-opensource-src | Jan 19, 2022 | Jan 1, 2022 |
| Gentoo Linux | — | Upgrade dev-qt/qtsvg. | May 10, 2024 | Jan 1, 2022 |
| Oracle_linux | — | Upgrade qt5-qtsvg-examplesUpgrade qt5-qtsvgUpgrade qt5-qtsvg-devel | May 18, 2022 | Dec 31, 2021 |
| Redhat_linux | — | No solution existsUpgrade qt5-qtsvg-develUpgrade qt5-qtsvg-examplesUpgrade qt5-qtsvgUpgrade qt5-qtsvg-examples-debuginfoUpgrade qt5-qtsvg-debuginfoUpgrade qt5-qtsvg-debugsourceUpgrade qt5-qtsvg-tests-debuginfo | May 13, 2022 | Jan 1, 2022 |
| Suse | — | Upgrade libqt4-sql-sqlite-32bitUpgrade libqt4-x11-32bitUpgrade libqt4-sqlUpgrade libqt4-x11Upgrade libqt4-sql-32bitUpgrade libqt4-sql-mysqlUpgrade libqt4-qt3support-32bitUpgrade libqt4-32bitUpgrade libqt4-devel-doc-dataUpgrade libqt4-sql-sqliteUpgrade libqt4Upgrade libqt5-qtsvg-examplesUpgrade libqt5-qtsvg-devel-32bitUpgrade libqt4-devel-docUpgrade qt4-x11-toolsUpgrade libqt4-sql-postgresql-32bitUpgrade libqt4-develUpgrade libqt5-qtsvg-private-headers-develUpgrade libqt5svg5Upgrade libqt5svg5-32bitUpgrade libqt4-sql-unixODBCUpgrade libqt4-private-headers-develUpgrade libqt4-sql-unixODBC-32bitUpgrade libqt4-qt3supportUpgrade libqt4-sql-postgresqlUpgrade libqt4-sql-mysql-32bitUpgrade libqt5-qtsvg-develUpgrade libqt4-linguist | Aug 9, 2024 | Jan 1, 2022 |
| Ubuntu | — | Upgrade libqt5svg5 (Ubuntu Pro)Upgrade libqt5svg5 | Jan 20, 2022 | Jan 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub