vulnerability

Ubuntu: USN-5241-1 (CVE-2021-3481): QtSvg vulnerabilities

Severity
6
CVSS
(AV:L/AC:M/Au:N/C:C/I:N/A:C)
Published
Oct 11, 2021
Added
Jan 20, 2022
Modified
Jan 28, 2025

Description

A flaw was found in Qt. An out-of-bounds read vulnerability was found in QRadialFetchSimd in qt/qtbase/src/gui/painting/qdrawhelper_p.h in Qt/Qtbase. While rendering and displaying a crafted Scalable Vector Graphics (SVG) file this flaw may lead to an unauthorized memory access. The highest threat from this vulnerability is to data confidentiality and the application availability.

Solution

ubuntu-upgrade-libqt5svg5
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.