Lookup for vulnerable packages by Package URL.
| Purl | pkg:deb/debian/qtsvg-opensource-src@5.3.2-2~bpo70%2B1 |
| Type | deb |
| Namespace | debian |
| Name | qtsvg-opensource-src |
| Version | 5.3.2-2~bpo70+1 |
| Qualifiers |
|
| Subpath | |
| Is_vulnerable | true |
| Next_non_vulnerable_version | 5.15.8-3 |
| Latest_non_vulnerable_version | 5.15.8-3 |
| Affected_by_vulnerabilities |
| 0 |
| url |
VCID-5kv1-u5pw-cyag |
| vulnerability_id |
VCID-5kv1-u5pw-cyag |
| summary |
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2018-19869 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.013 |
| scoring_system |
epss |
| scoring_elements |
0.80068 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.01336 |
| scoring_system |
epss |
| scoring_elements |
0.80353 |
| published_at |
2026-06-06T12:55:00Z |
|
| 2 |
| value |
0.01336 |
| scoring_system |
epss |
| scoring_elements |
0.80349 |
| published_at |
2026-06-07T12:55:00Z |
|
| 3 |
| value |
0.01336 |
| scoring_system |
epss |
| scoring_elements |
0.80343 |
| published_at |
2026-06-08T12:55:00Z |
|
| 4 |
| value |
0.01336 |
| scoring_system |
epss |
| scoring_elements |
0.80364 |
| published_at |
2026-06-09T12:55:00Z |
|
| 5 |
| value |
0.01336 |
| scoring_system |
epss |
| scoring_elements |
0.8035 |
| published_at |
2026-06-05T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2018-19869 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
|
| fixed_packages |
|
| aliases |
CVE-2018-19869
|
| risk_score |
1.5 |
| exploitability |
0.5 |
| weighted_severity |
3.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-5kv1-u5pw-cyag |
|
| 1 |
| url |
VCID-h2hs-pw42-f7as |
| vulnerability_id |
VCID-h2hs-pw42-f7as |
| summary |
A flaw was found in Qt. An out-of-bounds read vulnerability was found in QRadialFetchSimd in qt/qtbase/src/gui/painting/qdrawhelper_p.h in Qt/Qtbase. While rendering and displaying a crafted Scalable Vector Graphics (SVG) file this flaw may lead to an unauthorized memory access. The highest threat from this vulnerability is to data confidentiality and the application availability. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-3481 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00062 |
| scoring_system |
epss |
| scoring_elements |
0.19612 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00064 |
| scoring_system |
epss |
| scoring_elements |
0.20116 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.00064 |
| scoring_system |
epss |
| scoring_elements |
0.20207 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.00064 |
| scoring_system |
epss |
| scoring_elements |
0.20168 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00064 |
| scoring_system |
epss |
| scoring_elements |
0.20102 |
| published_at |
2026-06-08T12:55:00Z |
|
| 5 |
| value |
0.00064 |
| scoring_system |
epss |
| scoring_elements |
0.20215 |
| published_at |
2026-06-05T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-3481 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-3481
|
| risk_score |
3.2 |
| exploitability |
0.5 |
| weighted_severity |
6.4 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-h2hs-pw42-f7as |
|
|
| Fixing_vulnerabilities |
|
| Risk_score | 3.2 |
| Resource_url | http://public2.vulnerablecode.io/packages/pkg:deb/debian/qtsvg-opensource-src@5.3.2-2~bpo70%252B1 |