Out-of-Bounds Read Vulnerability in Qt Product Line
CVE-2021-3481

7.1HIGH

Key Information:

Vendor

Qt

Status
Qt
Vendor
CVE Published:
22 August 2022

What is CVE-2021-3481?

An out-of-bounds read vulnerability has been discovered in Qt's QRadialFetchSimd method within the graphic rendering component of the software. This flaw can occur when rendering specially crafted Scalable Vector Graphics (SVG) files, potentially leading to unauthorized access to memory. Such vulnerabilities pose significant risks primarily related to data confidentiality and application availability, necessitating immediate attention from users and administrators.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

qt Fixed in qt 5.12.11, qt 5.15.4, qt 6.0.3, qt 6.1.0RC.

References

https://bugreports.qt.io/browse/QTBUG-91507
https://codereview.qt-project.org/c/qt/qtsvg/+/337646
https://bugzilla.redhat.com/show_bug.cgi?id=1931444

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.