An issue was discovered in SVG++ (aka svgpp) 1.2.3. After calling the gil::get_color function in Generic Image Library in Boost, the return code is used as an address, leading to an Access Violation because of an out-of-bounds read.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 12 | all | svgpp | < 1.2.3+dfsg1-5 | svgpp_1.2.3+dfsg1-5_all.deb |
Debian | 11 | all | svgpp | < 1.2.3+dfsg1-5 | svgpp_1.2.3+dfsg1-5_all.deb |
Debian | 10 | all | svgpp | < 1.2.3+dfsg1-5 | svgpp_1.2.3+dfsg1-5_all.deb |
Debian | 999 | all | svgpp | < 1.2.3+dfsg1-5 | svgpp_1.2.3+dfsg1-5_all.deb |
Debian | 13 | all | svgpp | < 1.2.3+dfsg1-5 | svgpp_1.2.3+dfsg1-5_all.deb |