Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The _rsvg_node_poly_build_path function in rsvg-shapes.c in librsvg before 2.40.7 allows context-dependent attackers to cause a denial of service (out-of-bounds heap read) via an odd number of elements in a coordinate pair in an SVG document.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
LibRSVG 拒绝服务漏洞
Vulnerability Description
LibRSVG是一款使用C语言编写的SVG渲染引擎。 LibRSVG 2.40.7之前版本的rsvg-shapes.c文件中的‘_rsvg_node_poly_build_path’函数存在安全漏洞。攻击者可借助SVG文档中的坐标对中奇数的元素数利用该漏洞造成拒绝服务（越边界堆读取）。
CVSS Information
N/A
Vulnerability Type
N/A