CVE-2016-6163

CVE-2016-6163 affects librsvg2 2.40.2, where the vulnerable code is in the rsvg_pattern_fix_fallback function inside rsvg-paint_server.c. An attacker can craft an SVG file that triggers an out-of-bounds read, leading to a denial of service. The available connected sources confirm the vulnerabilit...

CVE-2016-6163

The rsvgpatternfixfallback function in rsvg-paintserver.c in librsvg2 2.40.2 allows remote attackers to cause a denial of service out-of-bounds read via a crafted svg file...