Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 10

Export CSV
CVE-2016-6163

librsvg2: Out-of-bounds read when processing crafted SVG file

The rsvg_pattern_fix_fallback function in rsvg-paint_server.c in librsvg2 2.40.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted svg file.

CVSS 3.0 · 5.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Gnome
Products
Librsvg
CVE-2017-11464

librsvg: SIGFPE is raised in box_blur_line function of rsvg-filter.c

A SIGFPE is raised in the function box_blur_line of rsvg-filter.c in GNOME librsvg 2.40.17 during an attempted parse of a crafted SVG file, because of incorrect protection against division by zero.

CVSS 3.0 · 7.8 High EPSS 1.4% KEV · Not listed
Vendors
Gnome
Products
Librsvg
CVE-2015-7557

librsvg2: Out-of-bounds heap read when parsing SVG file

The _rsvg_node_poly_build_path function in rsvg-shapes.c in librsvg before 2.40.7 allows context-dependent attackers to cause a denial of service (out-of-bounds heap read) via an odd number of elements in a coordinate pair in an SVG document.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Gnome
Products
Librsvg
CVE-2015-7558

librsvg2: Stack exhaustion causing DoS

librsvg before 2.40.12 allows context-dependent attackers to cause a denial of service (infinite loop, stack consumption, and application crash) via cyclic references in an SVG document.

CVSS 3.0 · 7.5 High EPSS 2.4% KEV · Not listed
Vendors
Debian Gnome
Products
Debian Linux Librsvg
CVE-2016-4348

librsvg2: DoS parsing SVGs with circular definitions _rsvg_css_normalize_font_size() function

The _rsvg_css_normalize_font_size function in librsvg 2.40.2 allows context-dependent attackers to cause a denial of service (stack consumption and application crash) via circular definitions in an SVG document.

CVSS 3.0 · 7.5 High EPSS 2.4% KEV · Not listed
Vendors
Debian Gnome Opensuse
Products
Debian Linux Librsvg Leap and 1 more
CVE-2011-3146

librsvg: object type mismatch leading to invalid pointer dereference

librsvg before 2.34.1 uses the node name to identify the type of node, which allows context-dependent attackers to cause a denial of service (NULL pointer dereference) and possibly execute arbitrary code via a SVG file with a node with the element name starting with "fe," which is misidentified as a RsvgFilterPrimitive.

CVSS 2.0 · 6.8 Medium EPSS 4.4% KEV · Not listed
Vendors
Gnome Redhat
Products
Librsvg Enterprise Linux
CVE-2013-1881

librsvg2: local resource access vulnerability due to XML External Entity enablement

GNOME libsvg before 2.39.0 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

CVSS 2.0 · 4.3 Medium EPSS 3.2% KEV · Not listed
Vendors
Gnome Redhat
Products
Librsvg Enterprise Linux
CVE-2023-38633

librsvg: Arbitrary file read when xinclude href has special characters

A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=".?../../../../../../../../../../etc/passwd" in an xi:include element.

CVSS 3.1 · 5.5 Medium EPSS 2.3% KEV · Not listed
Vendors
Debian Fedoraproject Gnome and 1 more
Products
Debian Linux Fedora Librsvg and 2 more
CVE-2019-20446

librsvg: Resource exhaustion via crafted SVG file with nested patterns

In xml.rs in GNOME librsvg before 2.46.2, a crafted SVG file with nested patterns can cause denial of service when passed to the library for processing. The attacker constructs pattern elements so that the number of final rendered objects grows exponentially.

CVSS 3.1 · 6.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 4 more
Products
Ubuntu Linux Debian Linux Fedora and 4 more
CVE-2018-1000041

librsvg: Improper input validation vulnerability in rsvg-io.c

GNOME librsvg version before commit c6ddf2ed4d768fd88adbea2b63f575cd523022ea contains a Improper input validation vulnerability in rsvg-io.c that can result in the victim's Windows username and NTLM password hash being leaked to remote attackers through SMB. This attack appear to be exploitable via The victim must process a specially crafted SVG file containing an UNC path on Windows.

CVSS 3.0 · 8.8 High EPSS 2.2% KEV · Not listed
Vendors
Debian Gnome
Products
Debian Linux Librsvg