CVE catalog

CVE-2021-3481

qtsvg-opensource-src affected and fixed versions

A flaw was found in Qt. An out-of-bounds read vulnerability was found in QRadialFetchSimd in qt/qtbase/src/gui/painting/qdrawhelper_p.h in Qt/Qtbase. While rendering and displaying a crafted Scalable Vector Graphics (SVG) file this flaw may lead to an unauthorized memory access. The highest threat from this vulnerability is to data confidentiality and the application availability.

Severity: High · CVSS 7.1CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
Published: Feb 22, 2021, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.55% · Oct 27, 2026

Projects and upstream resources

[qtsvg-opensource-src][Source-reported homepage]

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / release	Package	Version	Status	Source
Debiantrixie	qtsvg-opensource-src	`5.15.15-2`	Fixed	[CVE-2021-3481]
Debiantrixie	qtsvg-opensource-src	`5.15.2-3`	FixedDistribution-reported fixed boundary	[CVE-2021-3481]
Debiansid	qtsvg-opensource-src	`5.15.19-2`	Fixed	[CVE-2021-3481]
Debiansid	qtsvg-opensource-src	`5.15.2-3`	FixedDistribution-reported fixed boundary	[CVE-2021-3481]
Debianforky	qtsvg-opensource-src	`5.15.19-2`	Fixed	[CVE-2021-3481]
Debianforky	qtsvg-opensource-src	`5.15.2-3`	FixedDistribution-reported fixed boundary	[CVE-2021-3481]
Debianbookworm	qtsvg-opensource-src	`5.15.2-3`	FixedDistribution-reported fixed boundary	[CVE-2021-3481]
Debianbookworm	qtsvg-opensource-src	`5.15.8-3`	Fixed	[CVE-2021-3481]

Showing 8 fix observations. All 41 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence

Distribution / release	Package	Version	Status	Source
Debianbookworm	qtsvg-opensource-src	`5.15.2-3`	FixedDistribution-reported fixed boundary	[CVE-2021-3481]
Debianbookworm	qtsvg-opensource-src	`5.15.8-3`	Fixed	[CVE-2021-3481]
Debianforky	qtsvg-opensource-src	`5.15.19-2`	Fixed	[CVE-2021-3481]
Debianforky	qtsvg-opensource-src	`5.15.2-3`	FixedDistribution-reported fixed boundary	[CVE-2021-3481]
Debiansid	qtsvg-opensource-src	`5.15.19-2`	Fixed	[CVE-2021-3481]
Debiansid	qtsvg-opensource-src	`5.15.2-3`	FixedDistribution-reported fixed boundary	[CVE-2021-3481]
Debiantrixie	qtsvg-opensource-src	`5.15.15-2`	Fixed	[CVE-2021-3481]
Debiantrixie	qtsvg-opensource-src	`5.15.2-3`	FixedDistribution-reported fixed boundary	[CVE-2021-3481]
Opensuseleap 15.2	libqt5-qtsvg	`5.12.7-lp152.2.3.1`	UnknownSource applicability is not established	[OPENSUSE-SU-2021:1371-1]Feb 4, 2026, 2:55:56 AM UTC
Opensuseleap 15.3	libqt5-qtsvg	`5.12.7-3.3.1`	UnknownSource applicability is not established	[OPENSUSE-SU-2021:3354-1]Feb 4, 2026, 3:07:51 AM UTC
Suselinux enterprise module for basesystem 15 sp2	libqt5-qtsvg	`5.12.7-3.3.1`	UnknownSource applicability is not established	[SUSE-SU-2021:3354-1]Feb 4, 2026, 2:20:54 AM UTC
Suselinux enterprise module for basesystem 15 sp3	libqt5-qtsvg	`5.12.7-3.3.1`	UnknownSource applicability is not established	[SUSE-SU-2021:3354-1]Feb 4, 2026, 2:20:54 AM UTC
Suselinux enterprise module for desktop applications 15 sp2	libqt5-qtsvg	`5.12.7-3.3.1`	UnknownSource applicability is not established	[SUSE-SU-2021:3354-1]Feb 4, 2026, 2:20:54 AM UTC
Suselinux enterprise module for desktop applications 15 sp3	libqt5-qtsvg	`5.12.7-3.3.1`	UnknownSource applicability is not established	[SUSE-SU-2021:3354-1]Feb 4, 2026, 2:20:54 AM UTC
Suselinux enterprise server 12 sp5	libqt5-qtsvg	`5.6.2-3.6.1`	UnknownSource applicability is not established	[SUSE-SU-2021:3333-1]Feb 4, 2026, 4:08:29 AM UTC
Suselinux enterprise server for sap applications 12 sp5	libqt5-qtsvg	`5.6.2-3.6.1`	UnknownSource applicability is not established	[SUSE-SU-2021:3333-1]Feb 4, 2026, 4:08:29 AM UTC
Suselinux enterprise software development kit 12 sp5	libqt5-qtsvg	`5.6.2-3.6.1`	UnknownSource applicability is not established	[SUSE-SU-2021:3333-1]Feb 4, 2026, 4:08:29 AM UTC
Ubuntu14.04	qt4-x11	`4:4.8.4+dfsg-0ubuntu18`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-3481]May 28, 2026, 5:29:19 PM UTC
Ubuntu14.04	qt4-x11	`4:4.8.4+dfsg-0ubuntu19`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-3481]May 28, 2026, 5:29:19 PM UTC
Ubuntu14.04	qt4-x11	`4:4.8.4+dfsg-0ubuntu20`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-3481]May 28, 2026, 5:29:19 PM UTC
Ubuntu14.04	qt4-x11	`4:4.8.4+dfsg-0ubuntu21`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-3481]May 28, 2026, 5:29:19 PM UTC
Ubuntu14.04	qt4-x11	`4:4.8.4+dfsg-0ubuntu22`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-3481]May 28, 2026, 5:29:19 PM UTC
Ubuntu14.04	qt4-x11	`4:4.8.5+git192-g085f851+dfsg-2ubuntu3`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-3481]May 28, 2026, 5:29:19 PM UTC
Ubuntu14.04	qt4-x11	`4:4.8.5+git192-g085f851+dfsg-2ubuntu4`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-3481]May 28, 2026, 5:29:19 PM UTC
Ubuntu14.04	qt4-x11	`4:4.8.5+git192-g085f851+dfsg-2ubuntu4.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-3481]May 28, 2026, 5:29:19 PM UTC
Ubuntu16.04	qt4-x11	`4:4.8.6+git64-g5dc8b2b+dfsg-3~ubuntu8`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-3481]May 28, 2026, 5:29:19 PM UTC
Ubuntu16.04	qt4-x11	`4:4.8.7+dfsg-5ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-3481]May 28, 2026, 5:29:19 PM UTC
Ubuntu16.04	qt4-x11	`4:4.8.7+dfsg-5ubuntu2`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-3481]May 28, 2026, 5:29:19 PM UTC
Ubuntu18.04	qt4-x11	`4:4.8.7+dfsg-7ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-3481]May 28, 2026, 5:29:19 PM UTC
Ubuntu18.04	qtsvg-opensource-src	`5.9.1-2`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-3481]May 28, 2026, 5:29:19 PM UTC
Ubuntu18.04	qtsvg-opensource-src	`5.9.2-2`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-3481]May 28, 2026, 5:29:19 PM UTC
Ubuntu18.04	qtsvg-opensource-src	`5.9.2-3`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-3481]May 28, 2026, 5:29:19 PM UTC
Ubuntu18.04	qtsvg-opensource-src	`5.9.3-0ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-3481]May 28, 2026, 5:29:19 PM UTC
Ubuntu18.04	qtsvg-opensource-src	`5.9.4-0ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-3481]May 28, 2026, 5:29:19 PM UTC
Ubuntu18.04	qtsvg-opensource-src	`5.9.5-0ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-3481]May 28, 2026, 5:29:19 PM UTC
Ubuntu18.04	qtsvg-opensource-src	`5.9.5-0ubuntu1.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-3481]May 28, 2026, 5:29:19 PM UTC
Ubuntupro	qtsvg-opensource-src	`5.12.4-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-3481]May 28, 2026, 5:29:19 PM UTC
Ubuntupro	qtsvg-opensource-src	`5.12.5-2`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-3481]May 28, 2026, 5:29:19 PM UTC
Ubuntupro	qtsvg-opensource-src	`5.12.5-2build1`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-3481]May 28, 2026, 5:29:19 PM UTC
Ubuntupro	qtsvg-opensource-src	`5.12.8-0ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-3481]May 28, 2026, 5:29:19 PM UTC
Ubuntupro	qtsvg-opensource-src	`5.12.8-0ubuntu1+esm1`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-3481]May 28, 2026, 5:29:19 PM UTC

Original provider fields

{
  "package_releases": [
    {
      "name": "qtsvg-opensource-src",
      "status": "fixed",
      "release": "sid",
      "version": "5.15.19-2"
    },
    {
      "name": "qtsvg-opensource-src",
      "status": "fixed",
      "release": "forky",
      "version": "5.15.19-2"
    },
    {
      "name": "qtsvg-opensource-src",
      "status": "fixed",
      "release": "trixie",
      "version": "5.15.15-2"
    },
    {
      "name": "qtsvg-opensource-src",
      "status": "fixed",
      "release": "bookworm",
      "version": "5.15.8-3"
    }
  ],
  "fixed_versions": [
    {
      "bug": 986798,
      "name": "qtsvg-opensource-src",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "5.15.2-3"
    },
    {
      "bug": 986798,
      "name": "qtsvg-opensource-src",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "5.15.2-3"
    },
    {
      "bug": 986798,
      "name": "qtsvg-opensource-src",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "5.15.2-3"
    },
    {
      "bug": 986798,
      "name": "qtsvg-opensource-src",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "5.15.2-3"
    }
  ],
  "distribution_packages": [
    {
      "name": "qt4-x11",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "14.04",
      "versions": [
        "4:4.8.4+dfsg-0ubuntu18",
        "4:4.8.4+dfsg-0ubuntu19",
        "4:4.8.4+dfsg-0ubuntu20",
        "4:4.8.4+dfsg-0ubuntu21",
        "4:4.8.4+dfsg-0ubuntu22",
        "4:4.8.5+git192-g085f851+dfsg-2ubuntu3",
        "4:4.8.5+git192-g085f851+dfsg-2ubuntu4",
        "4:4.8.5+git192-g085f851+dfsg-2ubuntu4.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2021-3481",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2021-3481",
      "provider_updated_at": "2026-05-28T17:29:19.867859517Z",
      "applicability_unknown": true
    },
    {
      "name": "qt4-x11",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "16.04",
      "versions": [
        "4:4.8.6+git64-g5dc8b2b+dfsg-3~ubuntu8",
        "4:4.8.7+dfsg-5ubuntu1",
        "4:4.8.7+dfsg-5ubuntu2"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2021-3481",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2021-3481",
      "provider_updated_at": "2026-05-28T17:29:19.867859517Z",
      "applicability_unknown": true
    },
    {
      "name": "qtsvg-opensource-src",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.12.8-0ubuntu1+esm1"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "5.12.4-1",
        "5.12.5-2",
        "5.12.5-2build1",
        "5.12.8-0ubuntu1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2021-3481",
      "fixed_version": "5.12.8-0ubuntu1+esm1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2021-3481",
      "provider_updated_at": "2026-05-28T17:29:19.867859517Z",
      "applicability_unknown": true
    },
    {
      "name": "qtsvg-opensource-src",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.9.5-0ubuntu1.1"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "5.9.1-2",
        "5.9.2-2",
        "5.9.2-3",
        "5.9.3-0ubuntu1",
        "5.9.4-0ubuntu1",
        "5.9.5-0ubuntu1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2021-3481",
      "fixed_version": "5.9.5-0ubuntu1.1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2021-3481",
      "provider_updated_at": "2026-05-28T17:29:19.867859517Z",
      "applicability_unknown": true
    },
    {
      "name": "qt4-x11",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "4:4.8.7+dfsg-7ubuntu1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2021-3481",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2021-3481",
      "provider_updated_at": "2026-05-28T17:29:19.867859517Z",
      "applicability_unknown": true
    },
    {
      "name": "libqt5-qtsvg",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.6.2-3.6.1"
            }
          ]
        }
      ],
      "release": "linux enterprise software development kit 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:3333-1",
      "fixed_version": "5.6.2-3.6.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:3333-1",
      "provider_updated_at": "2026-02-04T04:08:29.650534Z",
      "applicability_unknown": true
    },
    {
      "name": "libqt5-qtsvg",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.6.2-3.6.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:3333-1",
      "fixed_version": "5.6.2-3.6.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:3333-1",
      "provider_updated_at": "2026-02-04T04:08:29.650534Z",
      "applicability_unknown": true
    },
    {
      "name": "libqt5-qtsvg",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.6.2-3.6.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:3333-1",
      "fixed_version": "5.6.2-3.6.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:3333-1",
      "provider_updated_at": "2026-02-04T04:08:29.650534Z",
      "applicability_unknown": true
    },
    {
      "name": "libqt5-qtsvg",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.12.7-3.3.1"
            }
          ]
        }
      ],
      "release": "leap 15.3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2021:3354-1",
      "fixed_version": "5.12.7-3.3.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2021:3354-1",
      "provider_updated_at": "2026-02-04T03:07:51.122957Z",
      "applicability_unknown": true
    },
    {
      "name": "libqt5-qtsvg",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.12.7-lp152.2.3.1"
            }
          ]
        }
      ],
      "release": "leap 15.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2021:1371-1",
      "fixed_version": "5.12.7-lp152.2.3.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2021:1371-1",
      "provider_updated_at": "2026-02-04T02:55:56.520595Z",
      "applicability_unknown": true
    },
    {
      "name": "libqt5-qtsvg",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.12.7-3.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for basesystem 15 sp2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:3354-1",
      "fixed_version": "5.12.7-3.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:3354-1",
      "provider_updated_at": "2026-02-04T02:20:54.474964Z",
      "applicability_unknown": true
    },
    {
      "name": "libqt5-qtsvg",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.12.7-3.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for basesystem 15 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:3354-1",
      "fixed_version": "5.12.7-3.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:3354-1",
      "provider_updated_at": "2026-02-04T02:20:54.474964Z",
      "applicability_unknown": true
    },
    {
      "name": "libqt5-qtsvg",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.12.7-3.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for desktop applications 15 sp2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:3354-1",
      "fixed_version": "5.12.7-3.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:3354-1",
      "provider_updated_at": "2026-02-04T02:20:54.474964Z",
      "applicability_unknown": true
    },
    {
      "name": "libqt5-qtsvg",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.12.7-3.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for desktop applications 15 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:3354-1",
      "fixed_version": "5.12.7-3.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:3354-1",
      "provider_updated_at": "2026-02-04T02:20:54.474964Z",
      "applicability_unknown": true
    }
  ]
}

[Debian bug #986798]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[libqt5svg5]Unknown
Source package: [qtsvg-opensource-src]
Details (2)
- 5.15.8-3 · amd64 · bookworm
  Fixed · Fixed: 5.15.2-3
  dsa · qtsvg-opensource-src · debian · bookworm; dsa · qtsvg-opensource-src · debian · 12
- 5.15.8-3 · arm64 · bookworm
  Fixed · Fixed: 5.15.2-3
  dsa · qtsvg-opensource-src · debian · bookworm; dsa · qtsvg-opensource-src · debian · 12
[libqt5svg5-dev]Unknown
Source package: [qtsvg-opensource-src]
Details (2)
- 5.15.8-3 · amd64 · bookworm
  Fixed · Fixed: 5.15.2-3
  dsa · qtsvg-opensource-src · debian · bookworm; dsa · qtsvg-opensource-src · debian · 12
- 5.15.8-3 · arm64 · bookworm
  Fixed · Fixed: 5.15.2-3
  dsa · qtsvg-opensource-src · debian · bookworm; dsa · qtsvg-opensource-src · debian · 12
[qtsvg5-doc]Unknown
Source package: [qtsvg-opensource-src]
Details (2)
- 5.15.8-3 · all · bookworm
  Fixed · Fixed: 5.15.2-3
  dsa · qtsvg-opensource-src · debian · bookworm; dsa · qtsvg-opensource-src · debian · 12
- 5.15.8-3 · all · bookworm
  Fixed · Fixed: 5.15.2-3
  dsa · qtsvg-opensource-src · debian · bookworm; dsa · qtsvg-opensource-src · debian · 12
[qtsvg5-doc-html]Unknown
Source package: [qtsvg-opensource-src]
Details (2)
- 5.15.8-3 · all · bookworm
  Fixed · Fixed: 5.15.2-3
  dsa · qtsvg-opensource-src · debian · bookworm; dsa · qtsvg-opensource-src · debian · 12
- 5.15.8-3 · all · bookworm
  Fixed · Fixed: 5.15.2-3
  dsa · qtsvg-opensource-src · debian · bookworm; dsa · qtsvg-opensource-src · debian · 12
[qtsvg5-examples]Unknown
Source package: [qtsvg-opensource-src]
Details (2)
- 5.15.8-3 · amd64 · bookworm
  Fixed · Fixed: 5.15.2-3
  dsa · qtsvg-opensource-src · debian · bookworm; dsa · qtsvg-opensource-src · debian · 12
- 5.15.8-3 · arm64 · bookworm
  Fixed · Fixed: 5.15.2-3
  dsa · qtsvg-opensource-src · debian · bookworm; dsa · qtsvg-opensource-src · debian · 12

[Debian 13 (Trixie)]

[libqt5svg5]Unknown
Source package: [qtsvg-opensource-src]
Details (2)
- 5.15.15-2 · amd64 · trixie
  Fixed · Fixed: 5.15.2-3
  dsa · qtsvg-opensource-src · debian · 13
- 5.15.15-2 · arm64 · trixie
  Fixed · Fixed: 5.15.2-3
  dsa · qtsvg-opensource-src · debian · 13
[libqt5svg5-dev]Unknown
Source package: [qtsvg-opensource-src]
Details (2)
- 5.15.15-2 · amd64 · trixie
  Fixed · Fixed: 5.15.2-3
  dsa · qtsvg-opensource-src · debian · 13
- 5.15.15-2 · arm64 · trixie
  Fixed · Fixed: 5.15.2-3
  dsa · qtsvg-opensource-src · debian · 13
[qtsvg5-doc]Unknown
Source package: [qtsvg-opensource-src]
Details (2)
- 5.15.15-2 · all · trixie
  Fixed · Fixed: 5.15.2-3
  dsa · qtsvg-opensource-src · debian · 13
- 5.15.15-2 · all · trixie
  Fixed · Fixed: 5.15.2-3
  dsa · qtsvg-opensource-src · debian · 13
[qtsvg5-doc-html]Unknown
Source package: [qtsvg-opensource-src]
Details (2)
- 5.15.15-2 · all · trixie
  Fixed · Fixed: 5.15.2-3
  dsa · qtsvg-opensource-src · debian · 13
- 5.15.15-2 · all · trixie
  Fixed · Fixed: 5.15.2-3
  dsa · qtsvg-opensource-src · debian · 13
[qtsvg5-examples]Unknown
Source package: [qtsvg-opensource-src]
Details (2)
- 5.15.15-2 · amd64 · trixie
  Fixed · Fixed: 5.15.2-3
  dsa · qtsvg-opensource-src · debian · 13
- 5.15.15-2 · arm64 · trixie
  Fixed · Fixed: 5.15.2-3
  dsa · qtsvg-opensource-src · debian · 13

Observed: Oct 23, 2026, 5:58:14 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]