qt:qtsvg_svg_qsvgrenderer_render: Crash in QRadialFetchSimd<QSimdSse2>::fetch

Detailed Report: https://oss-fuzz.com/testcase?key=5471124320223232 Project: qt Fuzzing Engine: afl Fuzz Target: qtsvgsvgqsvgrendererrender Job Type: aflasanqt Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x626e00002118 Crash State: QRadialFetchSimd::fetch qtfetchradialgradientsse2...

qt:qtsvg_svg_qsvgrenderer_render: Crash in QOutlineMapper::convertPath

Detailed Report: https://oss-fuzz.com/testcase?key=4909458290245632 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtsvgsvgqsvgrendererrender Job Type: libfuzzerasani386qt Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x24000000 Crash State: QOutlineMapper::convertPath...

Security advisory: Qt SVG

A recent buffer overflow issue in Qt SVG has been reported and has been assigned the CVE id CVE-2023-32763. This effects all Qt versions up to and including Qt 5.15.14, Qt 6.0.0-6.2.8 and Qt 6.3.0-6.5.0 When a SVG file with an image inside it is rendered, a QTextLayout overflow can be triggered...

qt:qtsvg_svg_qsvgrenderer_render: Crash in QRadialFetchSimd<QSimdSse2>::fetch

Detailed Report: https://oss-fuzz.com/testcase?key=4532970396712960 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtsvgsvgqsvgrendererrender Job Type: libfuzzerubsanqt Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffe04c63490 Crash State: QRadialFetchSimd::fetch unsigned...

qt:qtsvg_svg_qsvgrenderer_render: Stack-use-after-return in QSemaphore::release

Detailed Report: https://oss-fuzz.com/testcase?key=5721153550811136 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtsvgsvgqsvgrendererrender Job Type: libfuzzerasanqt Platform Id: linux Crash Type: Stack-use-after-return WRITE 8 Crash Address: 0x7f18f33cf460 Crash State: QSemaphore::release...

qt:qtsvg_svg_qsvgrenderer_render: Crash in QtPrivate::QCommonArrayOps<QPainterPath::Element>::growAppend

Project: git://code.qt.io/qt/qt5.git Detailed Report: https://oss-fuzz.com/testcase?key=6032459393794048 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtsvgsvgqsvgrendererrender Job Type: libfuzzerasani386qt Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x0fffed80 Crash State:...

qt:qtsvg_svg_qsvgrenderer_render: Crash in void QtPrivate::QPodArrayOps<QPainterPath::Element>::emplace<QPainterPath::Eleme

Project: git://code.qt.io/qt/qt5.git Detailed Report: https://oss-fuzz.com/testcase?key=4701438727553024 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtsvgsvgqsvgrendererrender Job Type: libfuzzerasani386qt Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x0ffffff0 Crash State:...

qt:qtsvg_svg_qsvgrenderer_render: Crash in QtPrivate::QPodArrayOps<QPainterPath::Element>::copyAppend

Project: git://code.qt.io/qt/qt5.git Detailed Report: https://oss-fuzz.com/testcase?key=5387021181911040 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtsvgsvgqsvgrendererrender Job Type: libfuzzerasani386qt Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x0fffed80 Crash State:...

qt:qtsvg_svg_qsvgrenderer_render: Crash in qpaintengineex_lineTo

Project: git://code.qt.io/qt/qt5.git Detailed Report: https://oss-fuzz.com/testcase?key=4992757474131968 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtsvgsvgqsvgrendererrender Job Type: libfuzzerasani386qt Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x40000000 Crash State:...

qt:qtsvg_svg_qsvgrenderer_render: Crash in qpaintengineex_lineTo

Project: git://code.qt.io/qt/qt5.git Detailed Report: https://oss-fuzz.com/testcase?key=5971641248120832 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtsvgsvgqsvgrendererrender Job Type: libfuzzerasani386qt Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x27000000 Crash State:...

qt:qtsvg_svg_qsvgrenderer_render: Global-buffer-overflow in QArrayDataPointer<QPainterPath::Element>::reallocateAndGrow

Project: git://code.qt.io/qt/qt5.git Detailed Report: https://oss-fuzz.com/testcase?key=5876045992558592 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtsvgsvgqsvgrendererrender Job Type: libfuzzerasani386qt Platform Id: linux Crash Type: Global-buffer-overflow WRITE Crash Address: 0x0ab1124...

qt:qtsvg_svg_qsvgrenderer_render: Crash in qpaintengineex_moveTo

Project: git://code.qt.io/qt/qt5.git Detailed Report: https://oss-fuzz.com/testcase?key=6305231065448448 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtsvgsvgqsvgrendererrender Job Type: libfuzzerasani386qt Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x26800000 Crash State:...