Segmentation Violation in lunasvg v2.3.9
CVE-2024-33768

9.8CRITICAL

Key Information:

Vendor

lunasvg

Status
Lunasvg
Vendor
CVE Published:
1 May 2024

What is CVE-2024-33768?

A segmentation violation has been discovered in Lunasvg version 2.3.9, specifically within the component composition_solid_source_over. This vulnerability can lead to application crashes or unpredictable behavior, potentially allowing attackers to disrupt service or exploit weaknesses in the application. It is vital for users and developers leveraging Lunasvg to address this issue to ensure continued stability and security of their applications. For further details, refer to the proof of concept linked in the references.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/keepinggg/poc/tree/main/poc_of_lunasvg

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.