52 matches found
Missing Release of Memory after Effective Lifetime
Overview Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime in the WriteSVGImage process. An attacker can exhaust system memory by submitting specially crafted image files for processing. Remediation A fix was pushed into the master branch but n...
6.9CVSS5.8AI score0.00384EPSS
SaveExploits0References2
20