CVE-2021-3481

A flaw was found in Qt. An out-of-bounds read vulnerability was found in QRadialFetchSimd in qt/qtbase/src/gui/painting/qdrawhelper_p.h in Qt/Qtbase. While rendering and displaying a crafted Scalable Vector Graphics (SVG) file this flaw may lead to an unauthorized memory access. The highest threat from this vulnerability is to data confidentiality and the application availability.

CVSS v3 7.1 HIGH

7.1^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://access.redhat.com/security/cve/CVE-2021-3481	Third Party Advisory
https://bugreports.qt.io/browse/QTBUG-91507	Exploit Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1931444	Issue Tracking Third Party Advisory
https://codereview.qt-project.org/c/qt/qtsvg/+/337646	Vendor Advisory
https://lists.debian.org/debian-lts-announce/2023/08/msg00028.html

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:qt:qt:5.15.1:::::::*
	cpe:2.3:a:qt:qt:6.0.0:-::::::
	cpe:2.3:a:qt:qt:6.0.2:::::::*
	cpe:2.3:a:qt:qt:6.2.0:-::::::

History

No history.

Information

Published : 2022-08-22 15:15

Updated : 2023-08-23 01:15

NVD link : CVE-2021-3481

Mitre link : CVE-2021-3481

CVE.ORG link : CVE-2021-3481

JSON object : View

Products Affected

qt

qt

CWE

CWE-125

Out-of-bounds Read

{"id": "CVE-2021-3481", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.1, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 1.8}]}, "published": "2022-08-22T15:15:13.363", "references": [{"url": "https://access.redhat.com/security/cve/CVE-2021-3481", "tags": ["Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "https://bugreports.qt.io/browse/QTBUG-91507", "tags": ["Exploit", "Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1931444", "tags": ["Issue Tracking", "Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "https://codereview.qt-project.org/c/qt/qtsvg/+/337646", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "https://lists.debian.org/debian-lts-announce/2023/08/msg00028.html", "source": "secalert@redhat.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-125"}]}, {"type": "Secondary", "source": "secalert@redhat.com", "description": [{"lang": "en", "value": "CWE-125"}]}], "descriptions": [{"lang": "en", "value": "A flaw was found in Qt. An out-of-bounds read vulnerability was found in QRadialFetchSimd in qt/qtbase/src/gui/painting/qdrawhelper_p.h in Qt/Qtbase. While rendering and displaying a crafted Scalable Vector Graphics (SVG) file this flaw may lead to an unauthorized memory access. The highest threat from this vulnerability is to data confidentiality and the application availability."}, {"lang": "es", "value": "Se ha encontrado un fallo en Qt. Se encontr\u00f3 una vulnerabilidad de lectura fuera de l\u00edmites en QRadialFetchSimd en el archivo qt/qtbase/src/gui/painting/qdrawhelper_p.h en Qt/Qtbase. Este fallo puede conllevar a un acceso no autorizado a la memoria al renderizar y mostrar un archivo Scalable Vector Graphics (SVG) dise\u00f1ado. La mayor amenaza de esta vulnerabilidad es la confidencialidad de los datos y la disponibilidad de la aplicaci\u00f3n."}], "lastModified": "2023-08-23T01:15:08.603", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:qt:qt:5.15.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EA7FCB6B-872F-4900-A2CF-192AFECC4DFC"}, {"criteria": "cpe:2.3:a:qt:qt:6.0.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C0A66DBD-439D-45EA-BC80-502314D5B0AC"}, {"criteria": "cpe:2.3:a:qt:qt:6.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AC14C9CB-1965-4659-8254-17EAB448616D"}, {"criteria": "cpe:2.3:a:qt:qt:6.2.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2B6E9814-F9BA-4A0C-8420-DAAB4A810567"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}