Login Request a demo
LI
Product
Librsvg
by Gnome · last CVE Jul 22, 2023
10
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 0High 5Medium 3Low 0
Severity
All severities10Critical0High5Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Librsvg to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-20446
6.5
2%
Feb 2
In xml.rs in GNOME librsvg before 2.46.2, a crafted SVG file with nested patterns can cause denial of service when passed to the library for processing
Affected: before 2.40.21; 2.42.0 before 2.42.8; 2.44.0 before 2.44.16
CVE-2023-38633
5.5
2%
Jul 22
A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the…
Affected: 2.42.3 before 2.46.6; 2.48.0 before 2.48.11; 2.50.0 before 2.50.8; 2.52.0 before 2.52.10; 2.54.0 before 2.54.6; 2.55.0 before 2.55.3; +1 more
CVE-2016-6163
5.5
1%
Feb 3
The rsvg_pattern_fix_fallback function in rsvg-paint_server.c in librsvg2 2.40.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted svg file
Affected: 2.40.2
Showing 3