diff options
| author | Salvatore Bonaccorso <carnil@debian.org> | 2022-01-01 17:49:00 +0100 |
|---|---|---|
| committer | Salvatore Bonaccorso <carnil@debian.org> | 2022-01-01 17:49:00 +0100 |
| commit | 2e85dd457033d0c950ba50908020aa6e33b393a5 (patch) | |
| tree | 17eaf594676b4cab770e21ce6b12cf70dbd04459 | |
| parent | b1096d0fe94409f4c223582254b1f49a410b5b54 (diff) | |
Add CVE-2021-45930/qtsvg-opensource-src
| -rw-r--r-- | data/CVE/2021.list | 9 |
1 files changed, 8 insertions, 1 deletions
diff --git a/data/CVE/2021.list b/data/CVE/2021.list index 039e5d9658..5ca1ad1223 100644 --- a/data/CVE/2021.list +++ b/data/CVE/2021.list @@ -94,7 +94,14 @@ CVE-2021-45932 (wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow (4 bytes) CVE-2021-45931 (HarfBuzz 2.9.0 has an out-of-bounds write in hb_bit_set_invertible_t:: ...) TODO: check CVE-2021-45930 (Qt SVG in Qt 5.0.0 through 6.2.1 has an out-of-bounds write in QtPriva ...) - TODO: check + - qtsvg-opensource-src <unfixed> + NOTE: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37025 + NOTE: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37306 + NOTE: https://github.com/google/oss-fuzz-vulns/blob/main/vulns/qt/OSV-2021-1121.yaml + NOTE: https://github.com/qt/qtsvg/commit/36cfd9efb9b22b891adee9c48d30202289cfa620 (dev) + NOTE: https://github.com/qt/qtsvg/commit/79bb9f51fa374106a612d17c9d98d35d807be670 (v6.2.2) + NOTE: https://github.com/qt/qtsvg/commit/a3b753c2d077313fc9eb93af547051b956e383fc (v5.12.12) + TODO: check if impact present for qt4-x11, furthermore while fixed in 5.12.12 it is not in 5.15.y. CVE-2021-45929 (Wasm3 0.5.0 has an out-of-bounds write in CompileBlock (called from Co ...) TODO: check CVE-2021-45928 (libjxl before 0.6, as used in libvips 8.11 through 8.11.2 and other pr ...) |