Homepage

Integer Overflow or Wraparound The advisory has been revoked - it doesn't affect any version of package qtwebengine-opensource-src  (opens in a new tab)

Threat Intelligence

EPSS
1.56% (73rd percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-UBUNTU2510-QTWEBENGINEOPENSOURCESRC-15025123
  • published17 Jan 2026
  • disclosed14 Apr 2021
Report a new vulnerability Found a mistake?

Introduced: 14 Apr 2021

CVE-2021-29338  (opens in a new tab)
CWE-190  (opens in a new tab)

Amendment

The Ubuntu security team deemed this advisory irrelevant for Ubuntu:25.10.

NVD Description

Note: Versions mentioned in the description apply only to the upstream qtwebengine-opensource-src package and not the qtwebengine-opensource-src package as distributed by Ubuntu.

Integer Overflow in OpenJPEG v2.4.0 allows remote attackers to crash the application, causing a Denial of Service (DoS). This occurs when the attacker uses the command line option "-ImgDir" on a directory that contains 1048576 files.

References