Approved changes feed: RSS · Atom
cpe:2.3:a:gnome:librsvg:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Gnome (0ee6d85f-ce9a-5064-936c-231d12a60ad5) |
|---|---|
| Product | Librsvg (00511b9b-14e9-5fab-b63d-9b92671af0e8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/librsvg |
purl2cpe | 2026-06-01 10:17:21.997776 |
pkg:deb/ubuntu/librsvg |
purl2cpe | 2026-06-01 10:17:21.997779 |
pkg:github/gnome/librsvg |
purl2cpe | 2026-06-01 10:17:21.997780 |
pkg:rpm/fedora/librsvg2 |
purl2cpe | 2026-06-01 10:17:21.997782 |
pkg:rpm/opensuse/librsvg |
purl2cpe | 2026-06-01 10:17:21.997784 |
pkg:sourceforge/librsvg |
purl2cpe | 2026-06-01 10:17:21.997786 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-38633 |
vulnerable | 2026-06-08 06:08:18.503621 |
Details available
A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=".?../../../../../../../../../../etc/passwd" in an xi:include element.
Published: 2023-07-22T00:00:00.000Z
Updated: 2024-08-02T17:46:56.600Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20446 |
vulnerable | 2026-06-08 05:13:40.636183 |
Details available
In xml.rs in GNOME librsvg before 2.46.2, a crafted SVG file with nested patterns can cause denial of service when passed to the library for processing. The attacker constructs pattern elements so that the number of final rendered objects grows exponentially.
Published: 2020-02-02T00:00:00.000Z
Updated: 2024-08-05T02:39:09.924Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1000041 |
vulnerable | 2026-06-08 05:10:25.345888 |
Details available
GNOME librsvg version before commit c6ddf2ed4d768fd88adbea2b63f575cd523022ea contains a Improper input validation vulnerability in rsvg-io.c that can result in the victim's Windows username and NTLM password hash being leaked to remote attackers through SMB. This attack appear to be exploitable via The victim must process a specially crafted SVG file containing an UNC path on Windows.
Published: 2018-02-09T23:00:00.000Z
Updated: 2024-08-05T12:33:48.985Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4348 |
vulnerable | 2026-06-08 05:07:47.210489 |
Details available
The _rsvg_css_normalize_font_size function in librsvg 2.40.2 allows context-dependent attackers to cause a denial of service (stack consumption and application crash) via circular definitions in an SVG document.
Published: 2016-05-20T14:00:00.000Z
Updated: 2024-08-06T00:25:14.473Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7558 |
vulnerable | 2026-06-08 05:07:01.370822 |
Details available
librsvg before 2.40.12 allows context-dependent attackers to cause a denial of service (infinite loop, stack consumption, and application crash) via cyclic references in an SVG document.
Published: 2016-05-20T14:00:00.000Z
Updated: 2024-08-06T07:51:28.587Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7557 |
vulnerable | 2026-06-08 05:07:01.370096 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1881 |
vulnerable | 2026-06-08 05:03:57.034606 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3146 |
vulnerable | 2026-06-08 04:58:10.758207 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.