CVE-2021-28025 - Vulnerability Details

Vendors	Products
Qt	Qt

Link	Providers
https://bugreports.qt.io/browse/QTBUG-91507
https://nvd.nist.gov/vuln/detail/CVE-2021-28025
https://www.cve.org/CVERecord?id=CVE-2021-28025

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2021-28025", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2024-10-09T17:37:40.750Z", "dateReserved": "2021-03-05T00:00:00", "datePublished": "2023-08-11T00:00:00"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2023-08-11T00:00:00"}, "descriptions": [{"lang": "en", "value": "Integer Overflow vulnerability in qsvghandler.cpp in Qt qtsvg versions 5.15.1, 6.0.0, 6.0.2, and 6.2, allows local attackers to cause a denial of service (DoS)."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://bugreports.qt.io/browse/QTBUG-91507"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T21:33:17.264Z"}, "title": "CVE Program Container", "references": [{"url": "https://bugreports.qt.io/browse/QTBUG-91507", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-10-09T17:37:32.242443Z", "id": "CVE-2021-28025", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-09T17:37:40.750Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

state : PUBLISHED (string)

cveId : CVE-2021-28025 (string)

assignerOrgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

assignerShortName : mitre (string)

dateUpdated : 2024-10-09T17:37:40.750Z (string)

dateReserved : 2021-03-05T00:00:00 (string)

datePublished : 2023-08-11T00:00:00 (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

shortName : mitre (string)

dateUpdated : 2023-08-11T00:00:00 (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : Integer Overflow vulnerability in qsvghandler.cpp in Qt qtsvg versions 5.15.1, 6.0.0, 6.0.2, and 6.2, allows local attackers to cause a denial of service (DoS). (string)

}

]

affected : [ »

0 : { »

vendor : n/a (string)

product : n/a (string)

versions : [ »

0 : { »

version : n/a (string)

status : affected (string)

}

]

}

]

references : [ »

0 : { »

url : https://bugreports.qt.io/browse/QTBUG-91507 (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : text (string)

lang : en (string)

description : n/a (string)

}

]

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-03T21:33:17.264Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://bugreports.qt.io/browse/QTBUG-91507 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

1 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-10-09T17:37:32.242443Z (string)

id : CVE-2021-28025 (string)

options : [ »

0 : { »

Exploitation : poc (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-10-09T17:37:40.750Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://bugreports.qt.io/browse/QTBUG-91507", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T21:33:17.264Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-28025", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-10-09T17:37:32.242443Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-09T17:37:36.857Z"}}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "references": [{"url": "https://bugreports.qt.io/browse/QTBUG-91507"}], "descriptions": [{"lang": "en", "value": "Integer Overflow vulnerability in qsvghandler.cpp in Qt qtsvg versions 5.15.1, 6.0.0, 6.0.2, and 6.2, allows local attackers to cause a denial of service (DoS)."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2023-08-11T00:00:00"}}}, "cveMetadata": {"cveId": "CVE-2021-28025", "state": "PUBLISHED", "dateUpdated": "2024-10-09T17:37:40.750Z", "dateReserved": "2021-03-05T00:00:00", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2023-08-11T00:00:00", "assignerShortName": "mitre"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://bugreports.qt.io/browse/QTBUG-91507 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-03T21:33:17.264Z (string)

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2021-28025 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : poc (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-10-09T17:37:32.242443Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-10-09T17:37:36.857Z (string)

}

]

cna : { »

affected : [ »

0 : { »

vendor : n/a (string)

product : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : n/a (string)

}

]

}

]

references : [ »

0 : { »

url : https://bugreports.qt.io/browse/QTBUG-91507 (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Integer Overflow vulnerability in qsvghandler.cpp in Qt qtsvg versions 5.15.1, 6.0.0, 6.0.2, and 6.2, allows local attackers to cause a denial of service (DoS). (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : text (string)

description : n/a (string)

}

]

}

]

providerMetadata : { »

orgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

shortName : mitre (string)

dateUpdated : 2023-08-11T00:00:00 (string)

}

cveMetadata : { »

cveId : CVE-2021-28025 (string)

state : PUBLISHED (string)

dateUpdated : 2024-10-09T17:37:40.750Z (string)

dateReserved : 2021-03-05T00:00:00 (string)

assignerOrgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

datePublished : 2023-08-11T00:00:00 (string)

assignerShortName : mitre (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:qt:qt:5.15.1:*:*:*:*:*:*:*", "matchCriteriaId": "EA7FCB6B-872F-4900-A2CF-192AFECC4DFC", "vulnerable": true}, {"criteria": "cpe:2.3:a:qt:qt:6.0.0:-:*:*:*:*:*:*", "matchCriteriaId": "C0A66DBD-439D-45EA-BC80-502314D5B0AC", "vulnerable": true}, {"criteria": "cpe:2.3:a:qt:qt:6.0.0:alpha1:*:*:*:*:*:*", "matchCriteriaId": "D47A6409-4A47-4963-9D77-DCC92668B6F3", "vulnerable": true}, {"criteria": "cpe:2.3:a:qt:qt:6.0.0:beta1:*:*:*:*:*:*", "matchCriteriaId": "28417B5D-0086-436E-9698-20E8C3E5E2E2", "vulnerable": true}, {"criteria": "cpe:2.3:a:qt:qt:6.0.0:beta2:*:*:*:*:*:*", "matchCriteriaId": "9EDDE01F-6F8A-412E-BFE3-5D0561629D12", "vulnerable": true}, {"criteria": "cpe:2.3:a:qt:qt:6.0.0:beta3:*:*:*:*:*:*", "matchCriteriaId": "F869EA5F-9246-48B2-8BF0-BF68DA091750", "vulnerable": true}, {"criteria": "cpe:2.3:a:qt:qt:6.0.0:beta4:*:*:*:*:*:*", "matchCriteriaId": "508C8F60-141E-4168-BCC8-114CD777D2E0", "vulnerable": true}, {"criteria": "cpe:2.3:a:qt:qt:6.0.0:beta5:*:*:*:*:*:*", "matchCriteriaId": "94F0B03A-ABD8-44AC-99D6-3232EC44DDE1", "vulnerable": true}, {"criteria": "cpe:2.3:a:qt:qt:6.0.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "44C86D23-6D06-4A62-90C3-173852C1545B", "vulnerable": true}, {"criteria": "cpe:2.3:a:qt:qt:6.0.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "E1FFE318-54E1-44B8-9164-696EE8CE280C", "vulnerable": true}, {"criteria": "cpe:2.3:a:qt:qt:6.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "AC14C9CB-1965-4659-8254-17EAB448616D", "vulnerable": true}, {"criteria": "cpe:2.3:a:qt:qt:6.2.0:alpha1:*:*:*:*:*:*", "matchCriteriaId": "B5846684-AB3C-4CF6-BEDB-660FDA8675DF", "vulnerable": true}, {"criteria": "cpe:2.3:a:qt:qt:6.2.0:beta1:*:*:*:*:*:*", "matchCriteriaId": "58B3621A-04A2-4302-9848-482B102895D8", "vulnerable": true}, {"criteria": "cpe:2.3:a:qt:qt:6.2.0:beta2:*:*:*:*:*:*", "matchCriteriaId": "EC7DBCDC-72EE-4C57-8E69-8A733A4F3602", "vulnerable": true}, {"criteria": "cpe:2.3:a:qt:qt:6.2.0:beta3:*:*:*:*:*:*", "matchCriteriaId": "D6212764-5B80-4340-8150-E8CD918ED396", "vulnerable": true}, {"criteria": "cpe:2.3:a:qt:qt:6.2.0:beta4:*:*:*:*:*:*", "matchCriteriaId": "3D2F8A83-BB1A-4938-B1CD-2B604C43D4CB", "vulnerable": true}, {"criteria": "cpe:2.3:a:qt:qt:6.2.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "EF6E8E02-CBCA-4AB3-8BDA-4177FEDECFF1", "vulnerable": true}, {"criteria": "cpe:2.3:a:qt:qt:6.2.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "221D7C16-BB9A-4145-9D18-D68728AFBF3B", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Integer Overflow vulnerability in qsvghandler.cpp in Qt qtsvg versions 5.15.1, 6.0.0, 6.0.2, and 6.2, allows local attackers to cause a denial of service (DoS)."}], "id": "CVE-2021-28025", "lastModified": "2024-11-21T05:58:59.580", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-08-11T14:15:12.453", "references": [{"source": "cve@mitre.org", "tags": ["Exploit", "Issue Tracking", "Vendor Advisory"], "url": "https://bugreports.qt.io/browse/QTBUG-91507"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Issue Tracking", "Vendor Advisory"], "url": "https://bugreports.qt.io/browse/QTBUG-91507"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-190"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:qt:qt:5.15.1:*:*:*:*:*:*:* (string)

matchCriteriaId : EA7FCB6B-872F-4900-A2CF-192AFECC4DFC (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:qt:qt:6.0.0:-:*:*:*:*:*:* (string)

matchCriteriaId : C0A66DBD-439D-45EA-BC80-502314D5B0AC (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:qt:qt:6.0.0:alpha1:*:*:*:*:*:* (string)

matchCriteriaId : D47A6409-4A47-4963-9D77-DCC92668B6F3 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:qt:qt:6.0.0:beta1:*:*:*:*:*:* (string)

matchCriteriaId : 28417B5D-0086-436E-9698-20E8C3E5E2E2 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:qt:qt:6.0.0:beta2:*:*:*:*:*:* (string)

matchCriteriaId : 9EDDE01F-6F8A-412E-BFE3-5D0561629D12 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:qt:qt:6.0.0:beta3:*:*:*:*:*:* (string)

matchCriteriaId : F869EA5F-9246-48B2-8BF0-BF68DA091750 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:qt:qt:6.0.0:beta4:*:*:*:*:*:* (string)

matchCriteriaId : 508C8F60-141E-4168-BCC8-114CD777D2E0 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:qt:qt:6.0.0:beta5:*:*:*:*:*:* (string)

matchCriteriaId : 94F0B03A-ABD8-44AC-99D6-3232EC44DDE1 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:qt:qt:6.0.0:rc1:*:*:*:*:*:* (string)

matchCriteriaId : 44C86D23-6D06-4A62-90C3-173852C1545B (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:qt:qt:6.0.0:rc2:*:*:*:*:*:* (string)

matchCriteriaId : E1FFE318-54E1-44B8-9164-696EE8CE280C (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:qt:qt:6.0.2:*:*:*:*:*:*:* (string)

matchCriteriaId : AC14C9CB-1965-4659-8254-17EAB448616D (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:qt:qt:6.2.0:alpha1:*:*:*:*:*:* (string)

matchCriteriaId : B5846684-AB3C-4CF6-BEDB-660FDA8675DF (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:qt:qt:6.2.0:beta1:*:*:*:*:*:* (string)

matchCriteriaId : 58B3621A-04A2-4302-9848-482B102895D8 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:qt:qt:6.2.0:beta2:*:*:*:*:*:* (string)

matchCriteriaId : EC7DBCDC-72EE-4C57-8E69-8A733A4F3602 (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:qt:qt:6.2.0:beta3:*:*:*:*:*:* (string)

matchCriteriaId : D6212764-5B80-4340-8150-E8CD918ED396 (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:a:qt:qt:6.2.0:beta4:*:*:*:*:*:* (string)

matchCriteriaId : 3D2F8A83-BB1A-4938-B1CD-2B604C43D4CB (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:a:qt:qt:6.2.0:rc1:*:*:*:*:*:* (string)

matchCriteriaId : EF6E8E02-CBCA-4AB3-8BDA-4177FEDECFF1 (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:a:qt:qt:6.2.0:rc2:*:*:*:*:*:* (string)

matchCriteriaId : 221D7C16-BB9A-4145-9D18-D68728AFBF3B (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Integer Overflow vulnerability in qsvghandler.cpp in Qt qtsvg versions 5.15.1, 6.0.0, 6.0.2, and 6.2, allows local attackers to cause a denial of service (DoS). (string)

}

]

id : CVE-2021-28025 (string)

lastModified : 2024-11-21T05:58:59.580 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 5.5 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 1.8 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2023-08-11T14:15:12.453 (string)

references : [ »

0 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Exploit (string)

1 : Issue Tracking (string)

2 : Vendor Advisory (string)

]

url : https://bugreports.qt.io/browse/QTBUG-91507 (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Exploit (string)

1 : Issue Tracking (string)

2 : Vendor Advisory (string)

]

url : https://bugreports.qt.io/browse/QTBUG-91507 (string)

}

]

sourceIdentifier : cve@mitre.org (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-190 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Show plain JSON

{"bugzilla": {"description": "qt-qtsvg: Out of bounds read in function `QRadialFetchSimd<QSimdSse2>::fetch` when input craft svg file", "id": "2231541", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2231541"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-125", "details": ["Integer Overflow vulnerability in qsvghandler.cpp in Qt qtsvg versions 5.15.1, 6.0.0, 6.0.2, and 6.2, allows local attackers to cause a denial of service (DoS).", "A flaw was found in the qt-qtsvg package. An integer overflow vulnerability in qsvghandler.cpp allows local attackers to cause a denial of service (DoS)."], "name": "CVE-2021-28025", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "qt5-qtsvg", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "qt5-qtsvg", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "qt5-qtsvg", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2023-08-11T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2021-28025\nhttps://nvd.nist.gov/vuln/detail/CVE-2021-28025\nhttps://bugreports.qt.io/browse/QTBUG-91507"], "statement": "This CVE is under investigation by Red Hat Product Security.", "threat_severity": "Moderate"}

{

bugzilla : { »

description : qt-qtsvg: Out of bounds read in function `QRadialFetchSimd<QSimdSse2>::fetch` when input craft svg file (string)

id : 2231541 (string)

url : https://bugzilla.redhat.com/show_bug.cgi?id=2231541 (string)

}

csaw : false (boolean)

cvss3 : { »

cvss3_base_score : 5.5 (string)

cvss3_scoring_vector : CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H (string)

status : draft (string)

}

cwe : CWE-125 (string)

details : [ »

0 : Integer Overflow vulnerability in qsvghandler.cpp in Qt qtsvg versions 5.15.1, 6.0.0, 6.0.2, and 6.2, allows local attackers to cause a denial of service (DoS). (string)

1 : A flaw was found in the qt-qtsvg package. An integer overflow vulnerability in qsvghandler.cpp allows local attackers to cause a denial of service (DoS). (string)

]

name : CVE-2021-28025 (string)

package_state : [ »

0 : { »

cpe : cpe:/o:redhat:enterprise_linux:7 (string)

fix_state : Out of support scope (string)

package_name : qt5-qtsvg (string)

product_name : Red Hat Enterprise Linux 7 (string)

}

1 : { »

cpe : cpe:/o:redhat:enterprise_linux:8 (string)

fix_state : Affected (string)

package_name : qt5-qtsvg (string)

product_name : Red Hat Enterprise Linux 8 (string)

}

2 : { »

cpe : cpe:/o:redhat:enterprise_linux:9 (string)

fix_state : Affected (string)

package_name : qt5-qtsvg (string)

product_name : Red Hat Enterprise Linux 9 (string)

}

]

public_date : 2023-08-11T00:00:00Z (string)

references : [ »

0 : https://www.cve.org/CVERecord?id=CVE-2021-28025 https://nvd.nist.gov/vuln/detail/CVE-2021-28025 https://bugreports.qt.io/browse/QTBUG-91507 (string)

]

statement : This CVE is under investigation by Red Hat Product Security. (string)

threat_severity : Moderate (string)

}

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction Required

Exploitation poc

Automatable no

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction Required

Exploitation poc

Automatable no

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object