LunaSVG 安全漏洞

LunaSVG is a standalone C SVG rendering library. A security vulnerability exists in LunaSVG that stems from a containment segmentation violation found via the component plutovgpathaddpath. No detailed vulnerability details are provided at this time...

CVE-2024-57720

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovgblend...

CVE-2024-57724

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component grayrecordcell...

CVE-2024-57721

CVE-2024-57721 concerns lunasvg v3.0.0 where a segmentation fault occurs in the plutovg_path_add_path path. The Fedora advisories link this to the lunasvg/plutovg integration, and recommend unbundling plutovg from lunasvg, updating lunasvg to use the plutovg version already in the repository, and...

CVE-2024-57719

Technical details about CVE-2024-57719 (affected components, root cause, and patch specifics) are not provided in the connected documents; Fedora advisories reference lunasvg/imhex and list the CVE but do not disclose the technical details.

CVE-2024-57723

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component compositionsourceover...

Vim < 9.1.1043 Out-of-bounds Write

A segmentation fault was found in Vim before 9.1.1043. In silent Ex mode -s -e, Vim typically doesn't show a screen and just operates silently in batch mode. However, it is still possible to trigger the function that handles the scrolling of a gui version of Vim by feeding some binary characters ...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : HTMLDOC vulnerabilities (USN-7225-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7225-1 advisory. It was discovered that HTMLDOC incorrectly handled memory in the imagesetmask,...

CVE-2024-55193

OpenImageIO v3.1.0.0dev was discovered to contain a segmentation violation via the component /OpenImageIO/stringview.h...

CVE-2024-57721

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovgpathaddpath...

LunaSVG 安全漏洞

LunaSVG is a standalone C SVG rendering library. A security vulnerability exists in LunaSVG that stems from the component blendtransformedtiledargb.isra.0 containing a segmentation violation. No detailed vulnerability details are provided at this time...

CVE-2024-50665

gpac 2.4 contains a SEGV at src/isomedia/drmsample.c:1562:96 in isomcencgetsaibysaizsaio in MP4Box...

CVE-2024-57720

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovgblend...

CVE-2024-57724

CVE-2024-57724 affects lunasvg in Fedora environments via the Lun aSVG/ImHex stack. The initial report describes a segmentation fault in lunasvg’s gray_record_cell, with linked advisories noting that lunasvg must be updated and pluto vg unbundled to fix multiple CVEs and to rebuild imhex for the ...

CVE-2024-57720

CVE-2024-57720 affects lunasvg v3.0.0 with a segmentation fault in the plutovg_blend component. The CVSSv3.1 base score is 6.5 (MEDIUM) with network attack vector, low attack complexity, no privileges required, user interaction required, and high impact to availability. Fedora advisories describe...

PT-2025-3098 · Unknown +1 · Openimageio +1

Name of the Vulnerable Software and Affected Versions: OpenImageIO version 3.1.0.0dev Description: A segmentation violation was discovered in OpenImageIO via the component /OpenImageIO/string view.h. This issue affects the specified version of OpenImageIO. Recommendations: For OpenImageIO version...

CVE-2024-57723

CVE-2024-57723 affects lunasvg and is reflected in Fedora advisories for lunasvg/imhex (Fedora 42–44 updates). The segmentation fault in composition_source_over is addressed by updating lunasvg to a newer version and by unbundling/consuming the bundled plutovg in the ecosystem, followed by rebuil...

CVE-2024-55193

OpenImageIO v3.1.0.0dev was discovered to contain a segmentation violation via the component /OpenImageIO/stringview.h...

PT-2025-3551 · Lunasvg · Lunasvg

Name of the Vulnerable Software and Affected Versions: lunasvg version 3.0.0 Description: The issue is a segmentation violation that occurs via the composition source over component. This can be exploited. Recommendations: For lunasvg version 3.0.0, consider disabling the composition source over...

CVE-2024-57724

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component grayrecordcell...