Out-of-Bounds Write Vulnerability in Qt 5.x and 6.x

CVE-2021-38593

What is CVE-2021-38593?

Qt versions 5.x before 5.15.6 and 6.x up to 6.1.2 are susceptible to an out-of-bounds write vulnerability found in the QOutlineMapper::convertPath function. This vulnerability is triggered during operations related to QRasterPaintEngine::fill and QPaintEngineEx::stroke, potentially leading to unexpected behavior or exploitation in applications relying on these versions of the Qt framework.

References