CVE-2019-6246

An issue was discovered in SVG++ (aka svgpp) 1.2.3. After calling the gil::get_color function in Generic Image Library in Boost, the return code is used as an address, leading to an Access Violation because of an out-of-bounds read.

USN-6178-1 — Several security issues were fixed in SVG++ library

Affected: Ubuntu:Pro:18.04:LTS: svgpp, Ubuntu:22.04:LTS: svgpp

It was discovered that in SVG++ library that the demo application incorrectly managed memory resulting in a memory access violation under certain circumstances. An attacker could possibly use this issue to leak memory information or run a denial of service attack. This issue only affected Ubuntu 18.04 LTS. (CVE-2019-6246)

It was discovered that in SVG++ library that the demo application incorrectly handled null pointers under certain circumstances. An attacker could possibly use this issue to cause denial of service, leak memory information or manipulate program execution flow. (CVE-2021-44960)

Most recent entries from all

CVE-2019-6246

USN-6178-1 — Several security issues were fixed in SVG++ library