Approved changes feed: RSS · Atom

cpe:2.3:a:androidsvg_project:androidsvg:1.2.2:-:*:*:*:*:*:*

part: a version: 1.2.2 update: -

VendorAndroidsvg Project (ad8eb5ca-98c6-5e92-a461-465cb2a1996c)
ProductAndroidsvg (945fbba6-d2a3-52f0-8ff3-65eed5d4f9c7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/bigbadaboom/androidsvg purl2cpe 2026-06-01 10:18:10.194898
pkg:maven/com.caverock/androidsvg purl2cpe 2026-06-01 10:18:10.194900

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1000498 vulnerable 2026-06-08 05:08:34.716280 Details available
AndroidSVG version 1.2.2 is vulnerable to XXE attacks in the SVG parsing component resulting in denial of service and possibly remote code execution
Published: 2018-01-03T14:00:00.000Z
Updated: 2024-09-16T16:13:29.547Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.