CVE-2024-22641

CVE-2024-22641 漏洞类型 正则表达式拒绝服务 ReDoS 受影响产品及版本 TCPDF root@kitploit: AddPage; $pdf-ImageSVG$file='poc.svg'; ? 注意：使用 preglasterror 检查漏洞行后的正则表达式，执行会以 PREGBACKTRACKLIMITERROR 退出。...

CVE-2023-23924

CVE-2023-23924 Dompdf 在 SVG 解析时存在 URI 校验失败漏洞 · CVE-2023-23924 · GitHub 安全公告数据库 https://github.com/advisories/GHSA-3cw5-7cxw-v5qg 运行 root@kitploit: Terminal 1 ❯ cd www ❯ php -S 127.0.0.1:9000 -t . Terminal 2 ❯ cd src ❯ php cve202323924.php 检查 检查 "whoami" 命令是否正在运行。 2.0.1 root@kitploit: ❯ php...

CVE-2021-42560

CVE-2021-42560：MITRE Caldera 中的不安全 XML 解析 Caldera 中的 Debrief 插件（版本 =2.9.0）在生成 PDF 时接收 base64 编码的 "SVG" 参数。这些 SVG 以不安全的方式解析，并可被利用进行 XXE 攻击（例如文件泄露、服务器端请求伪造、带外泄露等）。 供应商披露： 该漏洞的供应商披露信息可在此处找到。 要求： 此漏洞需要： 有效的用户凭据 概念验证： 更多详细信息和利用过程可在此 PDF 中找到。...

CVE-2024-37383_PoC

Repositorio para practicar directamente la vulnerabilidad CVE-2024-37383. Informe de análisis: blog / pdf CVE-2024-37383 Detalle Nombre : Roundcube Webmail SVG Parsing XSS Objetivo : Roundcube Webmail v1.5.7 o v1.6.x manipulada en un correo electrónico, se ejecuta un script arbitrario en el...

Autodesk 3ds Max 2026.x < 2026.3.4 / 2027.x < 2027.2.0 Multiple Vulnerabilities (ADSK-SA-2026-0014)

The version of Autodesk 3ds Max installed on the remote Windows host is 2026.x prior to 2026.3.4, or 2027.x prior to 2027.2.0. It is, therefore, affected by multiple vulnerabilities: - A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerabilit...

CVE-2026-52489

Buffer Overflow vulnerability in gpac 31becc9e08b88e525a4a62013a4000de1c0f8fd9 allows an attacker to execute arbitrary code via the svgNameToImplementationName function...

CVE-2026-19568

A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2026-16781

A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can trigger an Uncontrolled Recursion vulnerability. A malicious actor may leverage this vulnerability to cause the application to terminate unexpectedly, resulting in a denial-of-service...

CVE-2026-16782

A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2026-19568

CVE-2026-19568 affects Autodesk 3ds Max through a memory corruption flaw in its SVG file parsing routine. A maliciously crafted SVG file, when opened by a user, can trigger the corruption and lead to arbitrary code execution in the context of the current process. The CVSS 3.1 score is 7.8 (HIGH) ...

CVE-2026-19568 SVG File Parsing Memory Corruption Vulnerability in Autodesk 3ds Max

A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

EUVD-2026-65153

A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2026-16782

CVE-2026-16782 is an Out-of-Bounds Read vulnerability in Autodesk 3ds Max triggered when parsing a maliciously crafted SVG file . A successful exploit can lead to a crash, reading of sensitive data, or arbitrary code execution in the context of the current process. The NVD assigns a CVSS 3.1 scor...

EUVD-2026-65150

A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

EUVD-2026-65149

A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can trigger an Uncontrolled Recursion vulnerability. A malicious actor may leverage this vulnerability to cause the application to terminate unexpectedly, resulting in a denial-of-service...

CVE-2026-16781

A maliciously crafted SVG file , when parsed by Autodesk 3ds Max , triggers an Uncontrolled Recursion (stack exhaustion) vulnerability that causes the application to terminate unexpectedly, resulting in a denial-of-service . The CVSS v3.1 score is 5.5 (Medium) , with a local attack vector requiri...

CVE-2026-16781 SVG File Parsing Stack Exhaustion Vulnerability in Autodesk 3ds Max

A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can trigger an Uncontrolled Recursion vulnerability. A malicious actor may leverage this vulnerability to cause the application to terminate unexpectedly, resulting in a denial-of-service...

PT-2026-73144

stoatchat before 0.15.0 fails to validate SVG viewBox dimensions in the proxy endpoint, allowing attackers to cause denial of service by memory exhaustion. Attackers can host malicious SVGs with extremely large width and height values and trigger concurrent requests to exhaust available memory...

CVE-2026-39103

Buffer Overflow vulnerability in GPAC before commit v391dc7f4d234988ea0bc3cc294eb725eddf8f702 allows an attacker to cause a denial of service via the src/scenegraph/svgattributes.c, svgparsestrings, gfsvgparseattribute...

PT-2026-37061

Name of the Vulnerable Software and Affected Versions GPAC versions prior to commit v391dc7f4d234988ea0bc3cc294eb725eddf8f702 Description A buffer overflow allows an attacker to cause a denial of service. This issue occurs within the src/scenegraph/svg attributes.c file, specifically involving th...