ByteOS Network

CVE Vulnerability Details :

CVE-2021-38593

PUBLISHED

More Info Official Page

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-12 Aug, 2021 | 00:00

Updated At-04 Aug, 2024 | 01:44

▼CVE Numbering Authority (CNA)

Qt 5.x before 5.15.6 and 6.x through 6.1.2 has an out-of-bounds write in QOutlineMapper::convertPath (called from QRasterPaintEngine::fill and QPaintEngineEx::stroke).

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
https://github.com/qt/qtbase/commit/6b400e3147dcfd8cc3a393ace1bd118c93762e0c	N/A
https://github.com/qt/qtbase/commit/202143ba41f6ac574f1858214ed8bf4a38b73ccd	N/A
https://github.com/qt/qtbase/commit/1ca02cf2879a5e1511a2f2109f0925cf4c892862	N/A
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35566	N/A
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/qt/OSV-2021-903.yaml	N/A
https://www.qt.io/blog/qt-5.15-extended-support-for-subscription-license-holders	N/A
https://wiki.qt.io/Qt_5.15_Release#Known_Issues	N/A
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36VN2WKMNQUSTF6ZW2X52NPAJVXJ4S5I/	vendor-advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HY5YCSDCTLHVMP3OXOM6HNTWHV6DBHDX/	vendor-advisory
https://security.gentoo.org/glsa/202402-03	vendor-advisory

Hyperlink: https://github.com/qt/qtbase/commit/6b400e3147dcfd8cc3a393ace1bd118c93762e0c

Resource: N/A

Hyperlink: https://github.com/qt/qtbase/commit/202143ba41f6ac574f1858214ed8bf4a38b73ccd

Resource: N/A

Hyperlink: https://github.com/qt/qtbase/commit/1ca02cf2879a5e1511a2f2109f0925cf4c892862

Resource: N/A

Hyperlink: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35566

Resource: N/A

Hyperlink: https://github.com/google/oss-fuzz-vulns/blob/main/vulns/qt/OSV-2021-903.yaml

Resource: N/A

Hyperlink: https://www.qt.io/blog/qt-5.15-extended-support-for-subscription-license-holders

Resource: N/A

Hyperlink: https://wiki.qt.io/Qt_5.15_Release#Known_Issues

Resource: N/A

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36VN2WKMNQUSTF6ZW2X52NPAJVXJ4S5I/

Resource:

vendor-advisory

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HY5YCSDCTLHVMP3OXOM6HNTWHV6DBHDX/

Resource:

vendor-advisory

Hyperlink: https://security.gentoo.org/glsa/202402-03

Resource:

vendor-advisory

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://github.com/qt/qtbase/commit/6b400e3147dcfd8cc3a393ace1bd118c93762e0c	x_transferred
https://github.com/qt/qtbase/commit/202143ba41f6ac574f1858214ed8bf4a38b73ccd	x_transferred
https://github.com/qt/qtbase/commit/1ca02cf2879a5e1511a2f2109f0925cf4c892862	x_transferred
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35566	x_transferred
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/qt/OSV-2021-903.yaml	x_transferred
https://www.qt.io/blog/qt-5.15-extended-support-for-subscription-license-holders	x_transferred
https://wiki.qt.io/Qt_5.15_Release#Known_Issues	x_transferred
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36VN2WKMNQUSTF6ZW2X52NPAJVXJ4S5I/	vendor-advisory x_transferred
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HY5YCSDCTLHVMP3OXOM6HNTWHV6DBHDX/	vendor-advisory x_transferred
https://security.gentoo.org/glsa/202402-03	vendor-advisory x_transferred