Published: 12/08/2021 Updated: 03/02/2024

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Qt 5.x prior to 5.15.6 and 6.x up to and including 6.1.2 has an out-of-bounds write in QOutlineMapper::convertPath (called from QRasterPaintEngine::fill and QPaintEngineEx::stroke).

Vulnerable Product	Search on Vulmon	Subscribe to Product
qt qt
fedoraproject fedora 35
fedoraproject fedora 36

Synopsis Moderate: qt5-qtbase security update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for qt5-qtbase is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as havin ...

Synopsis Important: OpenShift Container Platform 4110 bug fix and security update Type/Severity Security Advisory: Important Topic Red Hat OpenShift Container Platform release 4110 is now available withupdates to packages and images that fix several bugs and add enhancementsThis release includes a security update for Red Hat OpenShift Co ...

Qt 5x before 5156 and 6x through 612 has an out-of-bounds write in QOutlineMapper::convertPath (called from QRasterPaintEngine::fill and QPaintEngineEx::stroke) (CVE-2021-38593) ...

Qt 500 through 612 has an out-of-bounds write in QOutlineMapper::convertPath (called from QRasterPaintEngine::fill and QPaintEngineEx::stroke) ...

CWE-787 https://github.com/google/oss-fuzz-vulns/blob/main/vulns/qt/OSV-2021-903.yaml https://github.com/qt/qtbase/commit/6b400e3147dcfd8cc3a393ace1bd118c93762e0c https://github.com/qt/qtbase/commit/1ca02cf2879a5e1511a2f2109f0925cf4c892862 https://github.com/qt/qtbase/commit/202143ba41f6ac574f1858214ed8bf4a38b73ccd https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35566 https://www.qt.io/blog/qt-5.15-extended-support-for-subscription-license-holders https://wiki.qt.io/Qt_5.15_Release#Known_Issues https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36VN2WKMNQUSTF6ZW2X52NPAJVXJ4S5I/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HY5YCSDCTLHVMP3OXOM6HNTWHV6DBHDX/https://security.gentoo.org/glsa/202402-03 https://access.redhat.com/errata/RHSA-2022:1796 https://nvd.nist.gov https://alas.aws.amazon.com/AL2/ALAS-2023-1967.html

CVE-2021-38593

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect