Qt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds write in QtPrivate::QCommonArrayOps<QPainterPath::Element>::growAppend (called from QPainterPath::addPath and QPathClipper::intersect).
| Software | From | Fixed in |
|---|---|---|
| qt / qtsvg | 5.0.0 | 5.15.2.x |
| qt / qtsvg | 6.0.0 | 6.2.1.x |
| fedoraproject / fedora | 34 | 34.x |
| fedoraproject / fedora | 35 | 35.x |
| debian / debian_linux | 9.0 | 9.0.x |