Segmentation Violation in lunasvg v3.0.0 by vendor's Component
CVE-2024-57723

6.5MEDIUM

Key Information:

Vendor
lunasvg
Status
lunasvg
Vendor
CVE Published:
23 January 2025

Summary

A segmentation violation has been identified in lunasvg version 3.0.0, specifically related to the component 'composition_source_over'. This vulnerability can disrupt the normal operation of the software by causing memory access violations, leading to potential instability and security risks.

References

https://github.com/keepinggg/poc/blob/main/poc_of_lunasvg...
https://github.com/sammycage/lunasvg/issues/209

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

.