Every CVE Search/ Get API key

OSV-2021-235

Global-buffer-overflow in QSvgSwitch::draw

No scoreFix available

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29873

Crash type: Global-buffer-overflow READ 1
Crash state:
QSvgSwitch::draw
QSvgTinyDocument::draw
QSvgTinyDocument::draw

What each source reports

OSV No score

Global-buffer-overflow in QSvgSwitch::draw

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29873

Crash type: Global-buffer-overflow READ 1
Crash state:
QSvgSwitch::draw
QSvgTinyDocument::draw
QSvgTinyDocument::draw
Record
OSV-2021-235
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
qt
OSS-Fuzz
Listed versions, plus commit ranges
qt-v5.0.0-alpha1v5.0.0v5.0.0-beta1v5.0.0-beta2v5.0.0-rc1
Show 45 moreShow less
v5.0.0-rc2v5.0.1v5.0.2v5.1.0v5.1.0-alpha1v5.1.0-beta1v5.1.0-rc1v5.1.0-rc2v5.1.1v5.10.0v5.10.0-alpha1v5.10.0-beta1v5.10.0-beta2v5.10.0-beta3v5.10.0-beta4v5.10.0-rc1v5.10.0-rc2v5.10.0-rc3v5.10.1v5.11.0v5.11.0-alpha1v5.11.0-beta1v5.11.0-beta2v5.11.0-beta3v5.11.0-beta4v5.11.0-rc1v5.11.0-rc2v5.11.1v5.11.2v5.11.3v5.12.0v5.12.0-alpha1v5.12.0-beta1v5.12.0-beta2v5.12.0-beta3v5.12.0-beta4v5.12.0-rc1v5.12.0-rc2v5.12.1v5.12.11v5.12.12v5.12.2v5.12.3v5.12.4v5.12.5
None known

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

OSV-2021-235 is a vulnerability with no CVSS score yet in qt, published January 25, 2021. No source lists public exploit code. A source reports a fix.

References

This page doesn't list everything

Left out here: 119 versions. The JSON record has them.

MoveEnter Open