Out-of-Bounds Write Vulnerability in Qt 5.x and 6.x
CVE-2021-38593

7.5HIGH

Key Information:

Vendor

Qt

Status
Qt
Vendor
CVE Published:
12 August 2021

What is CVE-2021-38593?

Qt versions 5.x before 5.15.6 and 6.x up to 6.1.2 are susceptible to an out-of-bounds write vulnerability found in the QOutlineMapper::convertPath function. This vulnerability is triggered during operations related to QRasterPaintEngine::fill and QPaintEngineEx::stroke, potentially leading to unexpected behavior or exploitation in applications relying on these versions of the Qt framework.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/qt/qtbase/commit/6b400e3147dcfd8cc3a39...
https://github.com/qt/qtbase/commit/202143ba41f6ac574f185...
https://github.com/qt/qtbase/commit/1ca02cf2879a5e1511a2f...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.