CVE-2021-45930: Medium severity Qt Qtsvg vulnerability
Published Dec 31, 2021
·Updated
Last updated 11 July 2025
Other sources
Qt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds write in QtPrivate::QCommonArrayOps<QPainterPath::Element>::growAppend (called from QPainterPath::addPath and QPathClipper::intersect).
— MITRE
Affected Software
6 affected componentsFixes available
Qt Qtsvg>=5.0.0<=5.15.2
Qt Qtsvg>=6.0.0<=6.2.1
Fedoraproject Fedora=34
Fedoraproject Fedora=35
Debian Debian Linux=9.0
debian/qtsvg-opensource-src<=5.15.2-3
5.15.8-35.15.15-25.15.17-3
Remediation
Event History
Dec 31, 2021
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Jan 1, 2022
Data Sourced
via NVD·01:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
May 28, 2026
Data Sourced
via Ubuntu·04:16 PM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Launchpad·04:16 PM
Description
Data Sourced
via Debian·04:17 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is CVE-2021-45930?
CVE-2021-45930 is a vulnerability in Qt SVG that allows for an out-of-bounds write in certain operations.
2
Which versions of Qt SVG are affected by CVE-2021-45930?
Qt SVG versions 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 are affected by CVE-2021-45930.
3
How severe is CVE-2021-45930?
CVE-2021-45930 has a severity rating of 5.5, which is considered medium.
4
How can I fix CVE-2021-45930?
To fix CVE-2021-45930, it is recommended to upgrade Qt SVG to a version that is not affected.
5
Where can I find more information about CVE-2021-45930?
More information about CVE-2021-45930 can be found in the following references: [reference links]