CVE-2016-4348 in librsvg
Summary
The _rsvg_css_normalize_font_size function in librsvg 2.40.2 allows context-dependent attackers to cause a denial of service (stack consumption and application crash) via circular definitions in an SVG document.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
04/28/2016
Disclosure
05/20/2016
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 87558 | librsvg SVG Document _rsvg_css_normalize_font_size input validation | 20 | Not defined | Official fix | CVE-2016-4348 |