CVE-2024-33766

lunasvg v2.3.9 was discovered to contain an FPE Floating Point Exception at blendtransformedtiledargb.isra.0...

CVE-2024-33767

lunasvg v2.3.9 was discovered to contain a segmentation violation via the component compositionsolidsource...

PYSEC-2024-281

lunasvg v2.3.9 was discovered to contain a stack-buffer-underflow at lunasvg/source/layoutcontext.cpp...

PYSEC-2024-284

lunasvg v2.3.9 was discovered to contain a segmentation violation via the component compositionsolidsource...

PYSEC-2024-285

lunasvg v2.3.9 was discovered to contain a segmentation violation via the component compositionsolidsourceover...

CVE-2024-33764

lunasvg v2.3.9 was discovered to contain a stack-overflow at lunasvg/source/element.h...

PYSEC-2024-282

lunasvg v2.3.9 was discovered to contain a stack-overflow at lunasvg/source/element.h...

PYSEC-2024-284

lunasvg v2.3.9 was discovered to contain a segmentation violation via the component compositionsolidsource...

lunasvg 安全漏洞

LunaSVG is a standalone C SVG rendering library by the individual developer Samuel Ugochukwu. A security vulnerability exists in lunasvg v2.3.9, which stems from a segmentation conflict in the component compositionsolidsource...

CVE-2024-33768

CVE-2024-33768 affects lunasvg v2.3.9 and is due to a segmentation violation in the composition_solid_source_over component, with the Snyk entry describing an out-of-bounds write and recommending upgrading to lunasvg 2.4.1 or higher. Some sources (PT-Security PT-2024-25471) confirm v2.3.9 as vuln...

CVE-2024-33766

Lunasvg v2.3.9 contains a Floating Point Exception (FPE) in the function blend_transformed_tiled_argb.isra.0, as reported for CVE-2024-33766. The CVE entry documents the vulnerability and notes an impact limited to availability (low) with no confidentiality or integrity impact, and a network atta...

CVE-2024-33763

lunasvg v2.3.9 was discovered to contain a stack-buffer-underflow at lunasvg/source/layoutcontext.cpp...

CVE-2024-33767

CVE-2024-33767 affects lunasvg v2.3.9 with a segmentation violation in the composition_solid_source component (NVD). Connected sources corroborate an Out-of-bounds Write causing denial of service; remediation is to upgrade lunasvg to version 2.4.1 or higher.

CVE-2024-33763

lunasvg v2.3.9 was discovered to contain a stack-buffer-underflow at lunasvg/source/layoutcontext.cpp...

CVE-2024-33764

lunasvg v2.3.9 was discovered to contain a stack-overflow at lunasvg/source/element.h...

CVE-2024-33764

CVE-2024-33764 affects lunasvg v2.3.9, with a stack-based overflow in lunasvg/source/element.h. The vulnerability is characterized by a LOCAL attack vector, LOW UX requirement, and HIGH availability impact. Remediation from the connected documents: upgrade to lunasvg 2.4.1 or higher. No exploitat...

CVE-2024-33763

lunasvg v2.3.9 was discovered to contain a stack-buffer-underflow at lunasvg/source/layoutcontext.cpp...

CVE-2024-33766

lunasvg v2.3.9 was discovered to contain an FPE Floating Point Exception at blendtransformedtiledargb.isra.0...

CVE-2024-33766

lunasvg v2.3.9 was discovered to contain an FPE Floating Point Exception at blendtransformedtiledargb.isra.0...

lunasvg 安全漏洞

LunaSVG is a standalone C SVG rendering library by the individual developer Samuel Ugochukwu. A security vulnerability exists in lunasvg version v2.3.9, which stems from a buffer overflow vulnerability in lunasvg/source/element.h. The vulnerability is caused by the use of a buffer overflow in...