OSV-2025-202
UNKNOWN READ in _blit_xrgb32_lerp_spans
No score
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=402836107
Crash type: UNKNOWN READ
Crash state:
_blit_xrgb32_lerp_spans
_cairo_rectangular_scan_converter_generate
composite_boxes
What each source reports
OSV No score
UNKNOWN READ in _blit_xrgb32_lerp_spans
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=402836107
Crash type: UNKNOWN READ
Crash state:
_blit_xrgb32_lerp_spans
_cairo_rectangular_scan_converter_generate
composite_boxes
- Record
OSV-2025-202- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
librsvgOSS-Fuzz |
Listed versions, plus commit ranges 2.58.922.58.932.58.942.59.02.59.0-beta.2 Show 38 moreShow less2.59.0-beta.32.59.0-beta.42.59.12.59.22.59.902.59.912.60.02.60.0-beta.02.60.0-beta.12.61.02.61.12.61.22.61.32.60.12.61.902.62.0-beta.02.60.22.61.912.62.0-beta.12.61.42.61.922.62.0-beta.22.62.02.62.12.62.22.62.32.62.902.63.0-beta.02.62.912.63.0-beta.12.63.02.60.32.61.52.62.42.63.12.63.22.63.32.63.4 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
OSV-2025-202 is a vulnerability with no CVSS score yet in librsvg, published March 15, 2025. No source lists public exploit code. No source names a fixed version.