135 matches found
LunaSVG 安全漏洞
LunaSVG is a standalone C SVG rendering library. A security vulnerability exists in LunaSVG that stems from the discovery of a containment allocation size oversize error via the component plutovgsurfacecreate. No detailed vulnerability details are provided at this time...
CVE-2024-57721
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovgpathaddpath...
CVE-2024-57719
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component blendtransformedtiledargb.isra.0...
CVE-2024-57721
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovgpathaddpath...
CVE-2024-57722
lunasvg v3.0.0 was discovered to contain a allocation-size-too-big bug via the component plutovgsurfacecreate...
CVE-2024-57723
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component compositionsourceover...
CVE-2024-57724
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component grayrecordcell...
CVE-2024-57720
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovgblend...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write due to a segmentation violation in the compositionsolidsourceover component. An attacker can potentially execute arbitrary code by exploiting this vulnerability. Remediation Upgrade lunasvg to version 2.4.1 or higher...
Divide By Zero
Overview Affected versions of this package are vulnerable to Divide By Zero due to the blendtransformedtiledargb.isra.0 function. An attacker can cause the application to crash by triggering a floating point exception. Remediation Upgrade lunasvg to version 2.4.1 or higher. References - GitHub...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write due to a segmentation violation in the compositionsolidsource component. An attacker can cause a denial of service. Remediation Upgrade lunasvg to version 2.4.1 or higher. References - GitHub Issue Credit: keepinggg...
Stack-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow due to improper buffer size validation within the layoutcontext.cpp component. The execution of this vulnerability could lead to potential execution of unauthorized code or denial of service. Remediation...
Stack-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow due to improper handling of certain inputs in the element.h component. An attacker can trigger this vulnerability by supplying specially crafted input to the application. Remediation Upgrade lunasvg to versio...
PYSEC-2024-285
lunasvg v2.3.9 was discovered to contain a segmentation violation via the component compositionsolidsourceover...
CVE-2024-33767
lunasvg v2.3.9 was discovered to contain a segmentation violation via the component compositionsolidsource...
PYSEC-2024-285
lunasvg v2.3.9 was discovered to contain a segmentation violation via the component compositionsolidsourceover...
PYSEC-2024-283
lunasvg v2.3.9 was discovered to contain an FPE Floating Point Exception at blendtransformedtiledargb.isra.0...
PYSEC-2024-282
lunasvg v2.3.9 was discovered to contain a stack-overflow at lunasvg/source/element.h...