CVE-2016-4348
HighSummary
The _rsvg_css_normalize_font_size function in librsvg 2.40.2 allows context-dependent attackers to cause a denial of service (stack consumption and application crash) via circular definitions in an SVG document.
Risk Assessment
An attacker can exploit this vulnerability to crash the application, potentially leading to service availability interruptions for users.
Recommendation
It is recommended to update librsvg to the latest version to mitigate this vulnerability and to monitor SVG documents for potential circular definitions.
Other vulnerabilities in librsvg 2.40.2
See all- CVE-2015-7558High
Librsvg before version 2.40.12 allows context-dependent attackers to cause a denial of service (infinite loop, stack consumption, and application crash) via cyclic references in an SVG document.
- CVE-2015-7557High
The _rsvg_node_poly_build_path function in librsvg before version 2.40.7 allows context-dependent attackers to cause a denial of service (out-of-bounds heap read) via an odd number of elements in a coordinate pair in an SVG document.
- CVE-2023-38633Medium
A directory traversal issue in the URL decoder of librsvg before version 2.56.3 could be exploited by local or remote attackers to disclose files from the local filesystem outside of the expected area.
Original NVD description (English source)
The _rsvg_css_normalize_font_size function in librsvg 2.40.2 allows context-dependent attackers to cause a denial of service (stack consumption and application crash) via circular definitions in an SVG document.