{"id":"CVE-2021-44960","aliases":["DEBIAN-CVE-2021-44960","DLA-3376-1","DLA-4337-1","EUVD-2021-31758","GHSA-2259-5mcv-w35h","UBUNTU-CVE-2021-44960","USN-6178-1"],"status":"published","title":"In SVGPP SVG++ library 1.3.0, the XMLDocument::getRoot function in the renderDocument function...","description":"In SVGPP SVG++ library 1.3.0, the XMLDocument::getRoot function in the renderDocument function handled the XMLDocument object improperly, returning a null pointer in advance at the second if, resulting in a null pointer reference behind the renderDocument function.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01179,"percentile":0.67935,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2022-02-15T00:00:00Z","modified":"2026-10-23T18:04:01Z","fixes":[{"ecosystem":"Debian:12","package":"svgpp","fixed_in":["1.3.0+dfsg1-5"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"svgpp","fixed_in":["1.3.0+dfsg1-5"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"svgpp","fixed_in":["1.3.0+dfsg1-5"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"svgpp","fixed_in":["1.3.0+dfsg1-4+deb11u1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"svgpp","fixed_in":["1.2.3+dfsg1-3ubuntu1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"svgpp","fixed_in":["1.3.0+dfsg1-3ubuntu2.22.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"svgpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0+dfsg1-5"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"svgpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0+dfsg1-5"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"svgpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0+dfsg1-5"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"svgpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3+dfsg1-6+deb10u1"}]}],"versions":["1.2.3+dfsg1-6"],"bundled":3},{"source":"osv","ecosystem":"Debian:11","package":"svgpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0+dfsg1-4+deb11u1"}]}],"versions":["1.3.0+dfsg1-4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"svgpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3+dfsg1-3ubuntu1+esm1"}]}],"versions":["1.2.3+dfsg1-3","1.2.3+dfsg1-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"svgpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.3+dfsg1-6"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"svgpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0+dfsg1-3ubuntu2.22.04.1"}]}],"versions":["1.3.0+dfsg1-3ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"svgpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3+dfsg1-3ubuntu1+esm1"}]}],"versions":["1.2.3+dfsg1-3","1.2.3+dfsg1-3ubuntu1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"svgpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0+dfsg1-3ubuntu2.22.04.1"}]}],"versions":["1.3.0+dfsg1-3ubuntu2"],"bundled":2}],"products":[{"vendor":"svgpp","product":"svgpp"}],"references":[{"url":"https://github.com/svgpp/svgpp/issues/101","tags":["x_transferred","Exploit","Issue Tracking","report"]},{"url":"https://github.com/svgpp/svgpp/issues/101.aa","tags":["x_transferred","Exploit","Issue Tracking","Third Party Advisory","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/04/msg00001.html","tags":["mailing-list","x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/10/msg00016.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-44960"},{"url":"https://github.com/advisories/GHSA-2259-5mcv-w35h"},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-44960","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-44960","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6178-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-44960","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-6246","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2021-44960","description":"In SVGPP SVG++ library 1.3.0, the XMLDocument::getRoot function in the renderDocument function handled the XMLDocument object improperly, returning a null pointer in advance at the second if, resulting in a null pointer reference behind the renderDocument function.","status":"published","published":"2022-02-15T00:00:00Z","modified":"2025-11-03T17:30:47.942Z","updated_at":"2026-11-02T14:33:01.166399Z"}],"euvd":[{"id":"EUVD-2021-31758","description":"In SVGPP SVG++ library 1.3.0, the XMLDocument::getRoot function in the renderDocument function handled the XMLDocument object improperly, returning a null pointer in advance at the second if, resulting in a null pointer reference behind the renderDocument function.","status":"published","published":"2022-02-15T00:00:00Z","modified":"2025-11-03T17:30:47Z","updated_at":"2026-11-02T19:49:35.000596Z"}],"ghsa":[{"id":"GHSA-2259-5mcv-w35h","title":"In SVGPP SVG++ library 1.3.0, the XMLDocument::getRoot function in the renderDocument function...","description":"In SVGPP SVG++ library 1.3.0, the XMLDocument::getRoot function in the renderDocument function handled the XMLDocument object improperly, returning a null pointer in advance at the second if, resulting in a null pointer reference behind the renderDocument function.","status":"published","published":"2022-02-16T00:01:42Z","modified":"2025-11-03T18:32:14Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T15:04:17.65818Z"}],"nvd":[{"id":"CVE-2021-44960","description":"In SVGPP SVG++ library 1.3.0, the XMLDocument::getRoot function in the renderDocument function handled the XMLDocument object improperly, returning a null pointer in advance at the second if, resulting in a null pointer reference behind the renderDocument function.","status":"published","published":"2022-02-15T16:15:08.46Z","modified":"2026-06-17T04:13:00.02Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:07:04.6896Z"}],"osv":[{"id":"CVE-2021-44960","description":"In SVGPP SVG++ library 1.3.0, the XMLDocument::getRoot function in the renderDocument function handled the XMLDocument object improperly, returning a null pointer in advance at the second if, resulting in a null pointer reference behind the renderDocument function.","status":"published","published":"2022-02-15T16:15:08.46Z","modified":"2026-10-20T10:55:07.210851373Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:21.877444Z"},{"id":"DEBIAN-CVE-2021-44960","description":"In SVGPP SVG++ library 1.3.0, the XMLDocument::getRoot function in the renderDocument function handled the XMLDocument object improperly, returning a null pointer in advance at the second if, resulting in a null pointer reference behind the renderDocument function.","status":"published","published":"2022-02-15T16:15:08.46Z","modified":"2026-10-23T18:04:01.195948135Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:35.799676Z"},{"id":"UBUNTU-CVE-2021-44960","description":"In SVGPP SVG++ library 1.3.0, the XMLDocument::getRoot function in the renderDocument function handled the XMLDocument object improperly, returning a null pointer in advance at the second if, resulting in a null pointer reference behind the renderDocument function.","status":"published","published":"2022-02-15T16:15:00Z","modified":"2026-02-04T02:50:48.976353Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:30.277322Z"},{"id":"DLA-3376-1","title":"svgpp - security update","status":"published","published":"2023-03-31T00:00:00Z","modified":"2026-03-09T01:21:39.52794Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DLA-4337-1","title":"svgpp - security update","status":"published","published":"2025-10-17T00:00:00Z","modified":"2025-10-17T18:32:32.220466Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"USN-6178-1","title":"Several security issues were fixed in SVG++ library","description":"It was discovered that in SVG++ library that the demo application incorrectly \nmanaged memory resulting in a memory access violation \nunder certain circumstances. An attacker could possibly use this issue \nto leak memory information or run a denial of service attack.\nThis issue only affected Ubuntu 18.04 LTS. (CVE-2019-6246)\n\nIt was discovered that in SVG++ library that the demo application \nincorrectly handled null pointers under certain circumstances. \nAn attacker could possibly use this issue to cause \ndenial of service, leak memory information or manipulate \nprogram execution flow. (CVE-2021-44960)\n","status":"published","published":"2023-06-19T18:38:42Z","modified":"2026-04-27T16:47:17.142553772Z","updated_at":"2026-11-02T16:58:16.738762Z"}]}}