CVE-2018-17334

CRITICAL 9.8CVE-2018-17334 · Published 22/09/2018 · updated 17/06/2026

In short

CVE-2018-17334 is a CRITICAL (CVSS 9.8) vulnerability affecting libsvg2 (libsvg2 project).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 75.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
libsvg2 libsvg2_project	`≤ 2012-10-19`	No fix yet

Description

An issue was discovered in libsvg2 through 2012-10-19. A stack-based buffer overflow in the svgGetNextPathField function in svg_string.c allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact because a strncpy copy limit is miscalculated.

References

agambier/libsvg2 · Exploit

More vulnerabilities in libsvg2

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free