CVE-2021-45930: debian debian_linux Out-of-bounds Write
Vulnerability summary
CVE-2021-45930 is a medium (CVSS 5.5) Out-of-bounds Write vulnerability in debian debian_linux. EPSS estimates a 1.35% chance of exploitation in the next 30 days, higher than 71% of scored vulnerabilities. 3 public exploits are recorded.
Advisory lineage
Upstream 0 · Downstream 12 · Related 8Timeline
- 31-12-2021PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
Qt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds write in QtPrivate::QCommonArrayOps<QPainterPath::Element>::growAppend (called from QPainterPath::addPath and QPathClipper::intersect).
CVSS metrics
5 scores · 4 sources · 2 versions- OSV · Red hatEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HDiffers
- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS trend
Probability
1.35%
Chance of exploitation in the next 30 days
Percentile
71%
Versus all other CVEs
30-day change
-0.01 pp
From 1.35% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
3 foundOss Fuzz Vulns
Maturity: poc
Exploit Reference (bugs.chromium.org)
Maturity: unknown
Exploit Reference (bugs.chromium.org)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Redhat7 products
- qt5-qtsvg< 0:5.15.2-4.el8
- qt5-qtsvg-debuginfo< 0:5.15.2-4.el8
- qt5-qtsvg-debugsource< 0:5.15.2-4.el8
- qt5-qtsvg-devel< 0:5.15.2-4.el8
- qt5-qtsvg-examples< 0:5.15.2-4.el8
Debian2 products
- qtsvg-opensource-src< 5.15.2-4
- debian_linuxEOL9.0
Fedoraproject1 product
- fedoraEOL34 | 35
Qt1 product
- qtsvg≥ 5.0.0, ≤ 5.15.2 | ≥ 6.0.0, ≤ 6.2.1
Ubuntu1 product
- qtsvg-opensource-src< 5.5.1-2ubuntu0.1~esm1 | < 5.9.5-0ubuntu1.1 | < 5.12.8-0ubuntu1+esm1
5 vendors · 12 products
References
24 links- github.com/google/oss-fuzz-vulns/blob/main/vulns/qt/OSV-2021-1121.yamlREPORTExploitThird Party Advisory
- lists.fedoraproject.org/archives/…Vendor Advisory
- lists.fedoraproject.org/archives/…Vendor Advisory
Show all 24 references
- lists.fedoraproject.org/archives/…Vendor Advisory
