CVE-2021-3481

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

A flaw was found in Qt. An out-of-bounds read vulnerability was found in QRadialFetchSimd in qt/qtbase/src/gui/painting/qdrawhelper_p.h in Qt/Qtbase. While rendering and displaying a crafted Scalable Vector Graphics (SVG) file this flaw may lead to an unauthorized memory access. The highest threat from this vulnerability is to data confidentiality and the application availability.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-125

Affected software

Vendor	Product	Versions
n/a	qt	Fixed in qt 5.12.11, qt 5.15.4, qt 6.0.3, qt 6.1.0RC.

References

https://access.redhat.com/security/cve/CVE-2021-3481Third Party Advisory
https://bugreports.qt.io/browse/QTBUG-91507Exploit, Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1931444Issue Tracking, Third Party Advisory
https://codereview.qt-project.org/c/qt/qtsvg/+/337646Vendor Advisory
https://lists.debian.org/debian-lts-announce/2023/08/msg00028.html
https://access.redhat.com/security/cve/CVE-2021-3481Third Party Advisory
https://bugreports.qt.io/browse/QTBUG-91507Exploit, Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1931444Issue Tracking, Third Party Advisory
https://codereview.qt-project.org/c/qt/qtsvg/+/337646Vendor Advisory
https://lists.debian.org/debian-lts-announce/2023/08/msg00028.html

Timeline

Published: Aug 22, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-348108.8Improper privilege management vulnerability in cgi component in Synology Download Station before 3.8.16-3566 allows remote authenticated use CVE-2021-348114.3Server-Side Request Forgery (SSRF) vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote CVE-2021-348127.5Use of hard-coded credentials vulnerability in php component in Synology Calendar before 2.4.0-0761 allows remote attackers to obtain sensit CVE-2021-348139.8Matrix libolm before 3.2.3 allows a malicious Matrix homeserver to crash a client (while it is attempting to retrieve an Olm encrypted room CVE-2021-348147.5Proofpoint Spam Engine before 8.12.0-2106240000 has a Security Control Bypass.CVE-2021-348154.8CheckSec Canopy before 3.5.2 allows XSS attacks against the login page via the LOGIN_PAGE_DISCLAIMER parameter.CVE-2021-348167.2An Argument Injection issue in the plugin management of Etherpad 1.8.13 allows privileged users to execute arbitrary code on the server by i CVE-2021-348176.1A Cross-Site Scripting (XSS) issue in the chat component of Etherpad 1.8.13 allows remote attackers to inject arbitrary JavaScript or HTML b CVE-2021-34826.5A flaw was found in Exiv2 in versions before and including 0.27.4-RC1. Improper input validation of the rawData.size property in Jp2Image::r CVE-2021-348207.5Web Path Directory Traversal in the Novus HTTP Server. The Novus HTTP Server is affected by the Directory Traversal for Arbitrary File Acces CVE-2021-348216.1Cross Site Scripting (XSS) vulnerability exists in AAT Novus Management System through 1.51.2. The WebUI has wrong HTTP 404 error handling i CVE-2021-348239.1The ON24 ScreenShare (aka DesktopScreenShare.app) plugin before 2.0 for macOS allows remote file access via its built-in HTTP server. This a