Every CVE Search/ Get API key

OSV-2021-1143

UNKNOWN WRITE in QtPrivate::QPodArrayOps<QPainterPath::Element>::copyAppend

No scoreFix available

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37306

This is the same issue as OSV-2021-1121 which it replaced after that one was closed wrongly.

Crash type: UNKNOWN WRITE
Crash state:
QtPrivate::QPodArrayOps<QPainterPath::Element>::copyAppend
QtPrivate::QCommonArrayOps<QPainterPath::Element>::growAppend
QList<QPainterPath::Element>::append

What each source reports

OSV No score

UNKNOWN WRITE in QtPrivate::QPodArrayOps<QPainterPath::Element>::copyAppend

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37306

This is the same issue as OSV-2021-1121 which it replaced after that one was closed wrongly.

Crash type: UNKNOWN WRITE
Crash state:
QtPrivate::QPodArrayOps<QPainterPath::Element>::copyAppend
QtPrivate::QCommonArrayOps<QPainterPath::Element>::growAppend
QList<QPainterPath::Element>::append
Record
OSV-2021-1143
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
qt
OSS-Fuzz
Listed versions, plus commit ranges
qt-v5.0.0-alpha1v5.0.0v5.0.0-beta1v5.0.0-beta2v5.0.0-rc1
Show 45 moreShow less
v5.0.0-rc2v5.0.1v5.0.2v5.1.0v5.1.0-alpha1v5.1.0-beta1v5.1.0-rc1v5.1.0-rc2v5.1.1v5.10.0v5.10.0-alpha1v5.10.0-beta1v5.10.0-beta2v5.10.0-beta3v5.10.0-beta4v5.10.0-rc1v5.10.0-rc2v5.10.0-rc3v5.10.1v5.11.0v5.11.0-alpha1v5.11.0-beta1v5.11.0-beta2v5.11.0-beta3v5.11.0-beta4v5.11.0-rc1v5.11.0-rc2v5.11.1v5.11.2v5.11.3v5.12.0v5.12.0-alpha1v5.12.0-beta1v5.12.0-beta2v5.12.0-beta3v5.12.0-beta4v5.12.0-rc1v5.12.0-rc2v5.12.1v5.12.10v5.12.11v5.12.2v5.12.3v5.12.4v5.12.5
None known

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

OSV-2021-1143 is a vulnerability with no CVSS score yet in qt, published August 19, 2021. No source lists public exploit code. A source reports a fix.

References

This page doesn't list everything

Left out here: 123 versions. The JSON record has them.

MoveEnter Open