135 matches found
PYSEC-2025-130
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovgpathaddpath...
PYSEC-2025-128
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component blendtransformedtiledargb.isra.0...
CVE-2024-57719
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component blendtransformedtiledargb.isra.0...
CVE-2024-57720
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovgblend...
CVE-2024-57721
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovgpathaddpath...
PYSEC-2025-128
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component blendtransformedtiledargb.isra.0...
PYSEC-2025-129
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovgblend...
PYSEC-2025-130
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovgpathaddpath...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write due to the plutovgblend component. Remediation A fix was pushed into the master branch but not yet published. References - GitHub Issue - PoC Credit: keepinggg...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the plutovgpathaddpath component. Remediation A fix was pushed into the master branch but not yet published. References - GitHub Issue - PoC Credit: keepinggg...
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS via the plutovgsurfacecreate component. An attacker can cause a denial of service by creating a surface with an excessively large size. Details Denial of Service DoS describes a family of attacks, all aimed at maki...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the grayrecordcell component. Remediation A fix was pushed into the master branch but not yet published. References - GitHub Issue - PoC Credit: keepinggg...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write due to the component blendtransformedtiledargb.isra.0. Remediation A fix was pushed into the master branch but not yet published. References - GitHub Issue - PoC Credit: keepinggg...
PT-2025-3549 · Lunasvg · Lunasvg
Name of the Vulnerable Software and Affected Versions: lunasvg version 3.0.0 Description: The issue is related to a segmentation violation in the plutovg path add path component. This component is part of the lunasvg software. Recommendations: For lunasvg version 3.0.0, consider restricting acces...
CVE-2024-57723
CVE-2024-57723 affects lunasvg and is reflected in Fedora advisories for lunasvg/imhex (Fedora 42–44 updates). The segmentation fault in composition_source_over is addressed by updating lunasvg to a newer version and by unbundling/consuming the bundled plutovg in the ecosystem, followed by rebuil...
PT-2025-3551 · Lunasvg · Lunasvg
Name of the Vulnerable Software and Affected Versions: lunasvg version 3.0.0 Description: The issue is a segmentation violation that occurs via the composition source over component. This can be exploited. Recommendations: For lunasvg version 3.0.0, consider disabling the composition source over...
CVE-2024-57723
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component compositionsourceover...
LunaSVG 安全漏洞
LunaSVG is a standalone C SVG rendering library. A security vulnerability exists in LunaSVG, which stems from the inclusion of a segmentation violation found via the component compositionsourceover. No detailed vulnerability details are provided at this time...
