Approved changes feed: RSS · Atom

cpe:2.3:a:gnome:librsvg:2.40.2:*:*:*:*:*:*:*

part: a version: 2.40.2 update: *

VendorGnome (0ee6d85f-ce9a-5064-936c-231d12a60ad5)
ProductLibrsvg (00511b9b-14e9-5fab-b63d-9b92671af0e8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/librsvg purl2cpe 2026-06-01 10:17:21.998824
pkg:deb/ubuntu/librsvg purl2cpe 2026-06-01 10:17:21.998825
pkg:github/gnome/librsvg purl2cpe 2026-06-01 10:17:21.998827
pkg:rpm/fedora/librsvg2 purl2cpe 2026-06-01 10:17:21.998829
pkg:rpm/opensuse/librsvg purl2cpe 2026-06-01 10:17:21.998831
pkg:sourceforge/librsvg purl2cpe 2026-06-01 10:17:21.998832

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-6163 vulnerable 2026-06-08 05:07:59.050250 Details available
The rsvg_pattern_fix_fallback function in rsvg-paint_server.c in librsvg2 2.40.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted svg file.
Published: 2017-02-03T15:00:00.000Z
Updated: 2024-08-06T01:22:20.549Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.