Qt 5.x before 5.15.6 and 6.x through 6.1.2 has an out-of-bounds write in QOutlineMapper::convertPath (called from QRasterPaintEngine::fill and QPaintEngineEx::stroke).

🗓️ 01 Oct 2021 07:00:00Reported by MicrosoftType

Versions prior to five fifteen six and six one two have an out-of-bounds write in OutlineMapper::convertPath used by fill and stroke.

Reporter	Title	Published	Views	Family All 65
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation 24.0.1-IF004 (June 2025)	2 Jul 202507:00	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	3 Jun 202511:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operands may be vulnerable to denial of service due to CVE-2021-38593	4 Nov 202217:46	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	29 Apr 202502:40	–	ibm
IBM Security Bulletins	Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for June 2025.	16 Jul 202509:05	–	ibm
IBM Security Bulletins	Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for January 2026.	23 Feb 202609:25	–	ibm
Tenable Nessus	Amazon Linux 2 : qt5-qtbase (ALAS-2023-1967)	7 Mar 202300:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0193: qt5-qtbase (ALINUX3-SA-2022:0193)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : qt5-qtbase (ALSA-2022:1796)	12 May 202200:00	–	nessus