AndroidSVG version 1.2.2 is vulnerable to XXE attacks in the SVG parsing component resulting in denial of service and possibly remote code execution...
6.8CVSS7.9AI score0.01573EPSS
SaveExploits0References1Affected Software1
Mend•added 2018/01/03 2:00 p.m.•2 views
CVE-2017-1000498
AndroidSVG version 1.2.2 is vulnerable to XXE attacks in the SVG parsing component resulting in denial of service and possibly remote code execution...