librsvg vulnerabilities (SUSE)
11 vulnerabilities.
-
librsvgSUSE Librsvg: use-after-free when xml includes have duplicated entities 7.8 High -
librsvgSUSE time affected by a stack exhaustion denial of service attack 6.8 Medium -
librsvgSUSE idna accepts Punycode labels that do not produce any non-ASCII when decoded 5.1 Medium -
librsvgSUSE `rustix::fs::Dir` iterator with the `linux_raw` backend can cause memory explosion 6.5 Medium -
librsvgSUSE A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local... 5.5 Medium -
librsvgSUSE Buffer overflow in SmallVec::insert_many 9.8 Critical -
librsvgSUSE In xml.rs in GNOME librsvg before 2.46.2, a crafted SVG file with nested patterns can cause... 6.5 Medium -
librsvgSUSE Double free in smallvec 9.8 Critical -
librsvgSUSE GNOME librsvg version before commit c6ddf2ed4d768fd88adbea2b63f575cd523022ea contains a Improper... 8.8 High -
librsvgSUSE A SIGFPE is raised in the function box_blur_line of rsvg-filter.c in GNOME librsvg 2.40.17 during... 7.8 High -
librsvgSUSE GNOME libsvg before 2.39.0 allows remote attackers to read arbitrary files via an XML document... 4.3 Medium