libsvg2 stack buffer overflow vulnerability (CNVD-2018-20091)

libsvg2 is a SVG parser written in C. It can be used for a variety of purposes. A stack buffer overflow vulnerability exists in the 'svgStringToLength' function of the svgtypes.c file in libsvg2 on 2012-10-19 and earlier. A remote attacker can exploit this vulnerability to cause a denial of servi...

CVE-2018-17333

An issue was discovered in libsvg2 through 2012-10-19. A stack-based buffer overflow in svgStringToLength in svgtypes.c allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact because sscanf is misused...