Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2018-25305

librsvg2-bin 2.40.13 Buffer Overflow via Malformed SVG

Description

librsvg2-bin 2.40.13 contains a buffer overflow vulnerability that allows local attackers to cause a denial of service by processing malformed SVG files. Attackers can supply crafted SVG input to the rsvg conversion tool to trigger a segmentation fault in the cairo image compositor.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

LibRsvg librsvg2-bin

Default version status: unaffected

  • 2.40.13affected

References