Shodan
Maps
Images
Monitor
Developer
More...
Dashboard
View Api Docs
Vulnerabilities
By Date
Known Exploited
Advanced Search
Vulnerable Software
Vendors
Products
Vulnerability Details CVE-2021-38593
Qt 5.x before 5.15.6 and 6.x through 6.1.2 has an out-of-bounds write in QOutlineMapper::convertPath (called from QRasterPaintEngine::fill and QPaintEngineEx::stroke).
Exploit prediction scoring system (EPSS) score
EPSS Score
0.03
EPSS Ranking
86.8%
CVSS Severity
CVSS v3 Score
7.5
CVSS v2 Score
5.0
References
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35566
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/qt/OSV-2021-903.yaml
https://github.com/qt/qtbase/commit/1ca02cf2879a5e1511a2f2109f0925cf4c892862
https://github.com/qt/qtbase/commit/202143ba41f6ac574f1858214ed8bf4a38b73ccd
https://github.com/qt/qtbase/commit/6b400e3147dcfd8cc3a393ace1bd118c93762e0c
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36VN2WKMNQUSTF6ZW2X52NPAJVXJ4S5I/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HY5YCSDCTLHVMP3OXOM6HNTWHV6DBHDX/
https://security.gentoo.org/glsa/202402-03
https://wiki.qt.io/Qt_5.15_Release#Known_Issues
https://www.qt.io/blog/qt-5.15-extended-support-for-subscription-license-holders
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35566
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/qt/OSV-2021-903.yaml
https://github.com/qt/qtbase/commit/1ca02cf2879a5e1511a2f2109f0925cf4c892862
https://github.com/qt/qtbase/commit/202143ba41f6ac574f1858214ed8bf4a38b73ccd
https://github.com/qt/qtbase/commit/6b400e3147dcfd8cc3a393ace1bd118c93762e0c
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36VN2WKMNQUSTF6ZW2X52NPAJVXJ4S5I/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HY5YCSDCTLHVMP3OXOM6HNTWHV6DBHDX/
https://security.gentoo.org/glsa/202402-03
https://wiki.qt.io/Qt_5.15_Release#Known_Issues
https://www.qt.io/blog/qt-5.15-extended-support-for-subscription-license-holders
Products affected by CVE-2021-38593
Qt
»
Qt
»
Version:
5.0.0
cpe:2.3:a:qt:qt:5.0.0
Qt
»
Qt
»
Version:
5.0.1
cpe:2.3:a:qt:qt:5.0.1
Qt
»
Qt
»
Version:
5.0.2
cpe:2.3:a:qt:qt:5.0.2
Qt
»
Qt
»
Version:
5.1.0
cpe:2.3:a:qt:qt:5.1.0
Qt
»
Qt
»
Version:
5.1.1
cpe:2.3:a:qt:qt:5.1.1
Qt
»
Qt
»
Version:
5.10.0
cpe:2.3:a:qt:qt:5.10.0
Qt
»
Qt
»
Version:
5.10.1
cpe:2.3:a:qt:qt:5.10.1
Qt
»
Qt
»
Version:
5.11.0
cpe:2.3:a:qt:qt:5.11.0
Qt
»
Qt
»
Version:
5.11.1
cpe:2.3:a:qt:qt:5.11.1
Qt
»
Qt
»
Version:
5.11.2
cpe:2.3:a:qt:qt:5.11.2
Qt
»
Qt
»
Version:
5.11.3
cpe:2.3:a:qt:qt:5.11.3
Qt
»
Qt
»
Version:
5.12.0
cpe:2.3:a:qt:qt:5.12.0
Qt
»
Qt
»
Version:
5.12.1
cpe:2.3:a:qt:qt:5.12.1
Qt
»
Qt
»
Version:
5.12.10
cpe:2.3:a:qt:qt:5.12.10
Qt
»
Qt
»
Version:
5.12.11
cpe:2.3:a:qt:qt:5.12.11
Qt
»
Qt
»
Version:
5.12.2
cpe:2.3:a:qt:qt:5.12.2
Qt
»
Qt
»
Version:
5.12.3
cpe:2.3:a:qt:qt:5.12.3
Qt
»
Qt
»
Version:
5.12.4
cpe:2.3:a:qt:qt:5.12.4
Qt
»
Qt
»
Version:
5.12.5
cpe:2.3:a:qt:qt:5.12.5
Qt
»
Qt
»
Version:
5.12.6
cpe:2.3:a:qt:qt:5.12.6
Qt
»
Qt
»
Version:
5.12.7
cpe:2.3:a:qt:qt:5.12.7
Qt
»
Qt
»
Version:
5.12.8
cpe:2.3:a:qt:qt:5.12.8
Qt
»
Qt
»
Version:
5.12.9
cpe:2.3:a:qt:qt:5.12.9
Qt
»
Qt
»
Version:
5.13.0
cpe:2.3:a:qt:qt:5.13.0
Qt
»
Qt
»
Version:
5.13.1
cpe:2.3:a:qt:qt:5.13.1
Qt
»
Qt
»
Version:
5.13.2
cpe:2.3:a:qt:qt:5.13.2
Qt
»
Qt
»
Version:
5.14
cpe:2.3:a:qt:qt:5.14
Qt
»
Qt
»
Version:
5.14.0
cpe:2.3:a:qt:qt:5.14.0
Qt
»
Qt
»
Version:
5.14.1
cpe:2.3:a:qt:qt:5.14.1
Qt
»
Qt
»
Version:
5.14.2
cpe:2.3:a:qt:qt:5.14.2
Qt
»
Qt
»
Version:
5.15.0
cpe:2.3:a:qt:qt:5.15.0
Qt
»
Qt
»
Version:
5.15.1
cpe:2.3:a:qt:qt:5.15.1
Qt
»
Qt
»
Version:
5.15.2
cpe:2.3:a:qt:qt:5.15.2
Qt
»
Qt
»
Version:
5.15.4
cpe:2.3:a:qt:qt:5.15.4
Qt
»
Qt
»
Version:
5.2.0
cpe:2.3:a:qt:qt:5.2.0
Qt
»
Qt
»
Version:
5.2.1
cpe:2.3:a:qt:qt:5.2.1
Qt
»
Qt
»
Version:
5.3.0
cpe:2.3:a:qt:qt:5.3.0
Qt
»
Qt
»
Version:
5.3.1
cpe:2.3:a:qt:qt:5.3.1
Qt
»
Qt
»
Version:
5.3.2
cpe:2.3:a:qt:qt:5.3.2
Qt
»
Qt
»
Version:
5.4.0
cpe:2.3:a:qt:qt:5.4.0
Qt
»
Qt
»
Version:
5.4.1
cpe:2.3:a:qt:qt:5.4.1
Qt
»
Qt
»
Version:
5.4.2
cpe:2.3:a:qt:qt:5.4.2
Qt
»
Qt
»
Version:
5.5.0
cpe:2.3:a:qt:qt:5.5.0
Qt
»
Qt
»
Version:
5.5.1
cpe:2.3:a:qt:qt:5.5.1
Qt
»
Qt
»
Version:
5.5.2
cpe:2.3:a:qt:qt:5.5.2
Qt
»
Qt
»
Version:
5.6.0
cpe:2.3:a:qt:qt:5.6.0
Qt
»
Qt
»
Version:
5.6.1
cpe:2.3:a:qt:qt:5.6.1
Qt
»
Qt
»
Version:
5.6.1-1
cpe:2.3:a:qt:qt:5.6.1-1
Qt
»
Qt
»
Version:
5.6.2
cpe:2.3:a:qt:qt:5.6.2
Qt
»
Qt
»
Version:
5.6.3
cpe:2.3:a:qt:qt:5.6.3
Qt
»
Qt
»
Version:
5.7
cpe:2.3:a:qt:qt:5.7
Qt
»
Qt
»
Version:
5.7.0
cpe:2.3:a:qt:qt:5.7.0
Qt
»
Qt
»
Version:
5.7.1
cpe:2.3:a:qt:qt:5.7.1
Qt
»
Qt
»
Version:
5.8.0
cpe:2.3:a:qt:qt:5.8.0
Qt
»
Qt
»
Version:
5.9.0
cpe:2.3:a:qt:qt:5.9.0
Qt
»
Qt
»
Version:
5.9.1
cpe:2.3:a:qt:qt:5.9.1
Qt
»
Qt
»
Version:
5.9.10
cpe:2.3:a:qt:qt:5.9.10
Qt
»
Qt
»
Version:
5.9.2
cpe:2.3:a:qt:qt:5.9.2
Qt
»
Qt
»
Version:
5.9.3
cpe:2.3:a:qt:qt:5.9.3
Qt
»
Qt
»
Version:
5.9.4
cpe:2.3:a:qt:qt:5.9.4
Qt
»
Qt
»
Version:
5.9.5
cpe:2.3:a:qt:qt:5.9.5
Qt
»
Qt
»
Version:
5.9.6
cpe:2.3:a:qt:qt:5.9.6
Qt
»
Qt
»
Version:
5.9.7
cpe:2.3:a:qt:qt:5.9.7
Qt
»
Qt
»
Version:
5.9.8
cpe:2.3:a:qt:qt:5.9.8
Qt
»
Qt
»
Version:
5.9.9
cpe:2.3:a:qt:qt:5.9.9
Qt
»
Qt
»
Version:
6.0.0
cpe:2.3:a:qt:qt:6.0.0
Qt
»
Qt
»
Version:
6.0.1
cpe:2.3:a:qt:qt:6.0.1
Qt
»
Qt
»
Version:
6.0.2
cpe:2.3:a:qt:qt:6.0.2
Qt
»
Qt
»
Version:
6.0.3
cpe:2.3:a:qt:qt:6.0.3
Qt
»
Qt
»
Version:
6.0.4
cpe:2.3:a:qt:qt:6.0.4
Qt
»
Qt
»
Version:
6.1.0
cpe:2.3:a:qt:qt:6.1.0
Qt
»
Qt
»
Version:
6.1.1
cpe:2.3:a:qt:qt:6.1.1
Qt
»
Qt
»
Version:
6.1.2
cpe:2.3:a:qt:qt:6.1.2
Fedoraproject
»
Fedora
»
Version:
35
cpe:2.3:o:fedoraproject:fedora:35
Fedoraproject
»
Fedora
»
Version:
36
cpe:2.3:o:fedoraproject:fedora:36
Products
Monitor
Search Engine
Developer API
Maps
Bulk Data
Images
Snippets
Pricing
Membership
API Subscriptions
Enterprise
Contact Us
support@shodan.io
Shodan ® - All rights reserved