CVE-2021-3481

Severity: high (CVSS 7.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2022-08-22 · updated 2026-06-17
Weakness: CWE-125

Description

A flaw was found in Qt. An out-of-bounds read vulnerability was found in QRadialFetchSimd in qt/qtbase/src/gui/painting/qdrawhelper_p.h in Qt/Qtbase. While rendering and displaying a crafted Scalable Vector Graphics (SVG) file this flaw may lead to an unauthorized memory access. The highest threat from this vulnerability is to data confidentiality and the application availability.

Affected products

Qt: 5.15.1, 6.0.0, 6.0.2, 6.2.0

References

https://access.redhat.com/security/cve/CVE-2021-3481
https://bugreports.qt.io/browse/QTBUG-91507
https://bugzilla.redhat.com/show_bug.cgi?id=1931444
https://codereview.qt-project.org/c/qt/qtsvg/+/337646
https://lists.debian.org/debian-lts-announce/2023/08/msg00028.html
https://access.redhat.com/security/cve/CVE-2021-3481
https://bugreports.qt.io/browse/QTBUG-91507
https://bugzilla.redhat.com/show_bug.cgi?id=1931444
https://codereview.qt-project.org/c/qt/qtsvg/+/337646
https://lists.debian.org/debian-lts-announce/2023/08/msg00028.html

Get alerted when CVE-2021-3481 or the next vulnerability affects your stack