Known vulnerabilities in librsvg

Software: librsvg
Software CPE: cpe:2.3:a:gnome:librsvg:*:*:*:*:*:*:*:*
Total vulnerabilities: 11
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting librsvg librsvg is affected by 11 known vulnerabilities: 1 high, 8 medium, 2 low Critical High Medium Low

Vulnerabilities (11)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU78756 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-38633
CWE-22 Medium
No
No
2.56.3 28.07.2023 SB2023072832
SB2023072902
SB2023080153
and 13 more
#VU25011 - Resource exhaustion
CVE-2019-20446
CWE-400 Medium
No
No
2.46.2, 2.47.2 06.02.2020 SB2020013122
SB2020031517
SB2020022622
and 14 more
#VU24818 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2013-1881
CWE-611 Medium
No
No
2.39.0 01.02.2020 SB2013101001
SB2015102002
SB2014020301
and 2 more
#VU24817 - Divide By Zero
CVE-2017-11464
CWE-369 Low
No
No
2.40.18 01.02.2020 SB2017071913
SB2020072757
SB2020072977
and 6 more
#VU24816 - Out-of-bounds read
CVE-2016-6163
CWE-125 Low
No
No
2.40.2 01.02.2020 SB2017020303
#VU24815 - Out-of-bounds read
CVE-2015-7557
CWE-125 Medium
No
No
2.40.7 01.02.2020 SB2016052003
#VU24814 - NULL Pointer Dereference
CVE-2011-3146
CWE-476 High
No
No
2.34.1 01.02.2020 SB2012090601
SB2011091301
#VU24813 - Resource Management Errors
CVE-2016-4348
CWE-399 Medium
No
No
2.40.3 31.01.2020 SB2016052002
SB2016052004
#VU24812 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2015-7558
CWE-835 Medium
No
No
2.40.12 31.01.2020 SB2016052001
SB2016052004
SB2016062310
#VU24811 - Loop with Unreachable Exit Condition ('Infinite Loop')
CWE-835 Medium
No
No
2.47.2 31.01.2020 SB2020013122
#VU33981 - Improper input validation
CVE-2010-0405
CWE-20 Medium
No
No
- 28.09.2010 SB2010092801
SB2010092202
SB2010092203
and 3 more