HIGH🇵🇱 Wersja polska

CVE-2015-7557

CVSS 7.5v3.0pub. 2016-05-20upd. 2026-05-06

The _rsvg_node_poly_build_path function in rsvg-shapes.c in librsvg before 2.40.7 allows context-dependent attackers to cause a denial of service (out-of-bounds heap read) via an odd number of elements in a coordinate pair in an SVG document.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

  • Gnome Librsvg

    APP
    Gnome
    ≤ 2.40.6
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoSMemory
CWE
References

Related vulnerabilities

CVE-2018-1000041HIGH8.8ten sam produkt

GNOME librsvg version before commit c6ddf2ed4d768fd88adbea2b63f575cd523022ea contains a Improper input validat...

CVE-2017-11464HIGH7.8ten sam produkt

A SIGFPE is raised in the function box_blur_line of rsvg-filter.c in GNOME librsvg 2.40.17 during an attempted...

CVE-2015-7558HIGH7.5ten sam produkt

librsvg before 2.40.12 allows context-dependent attackers to cause a denial of service (infinite loop, stack c...

CVE-2016-4348HIGH7.5ten sam produkt

The _rsvg_css_normalize_font_size function in librsvg 2.40.2 allows context-dependent attackers to cause a den...

CVE-2023-38633MEDIUM5.5ten sam produkt

A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote att...