Description (CNA)
librsvg2-bin 2.40.13 contains a buffer overflow vulnerability that allows local attackers to cause a denial of service by processing malformed SVG files. Attackers can supply crafted SVG input to the rsvg conversion tool to trigger a segmentation fault in the cairo image compositor.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| LibRsvg / librsvg2-bin | affected 2.40.13 |
CWE
CWE-120
References
- https://www.exploit-db.com/exploits/44491
- https://www.vulncheck.com/advisories/librsvg2-bin-buffer-overflow-via-malformed-svg
ADP enrichment
No English description supplied.
No references supplied.