Nixpkgs security tracker

Permalink CVE-2018-25305

6.2 MEDIUM

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): LOW
Privileges required (PR): NONE
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): NONE
Integrity impact (I): NONE
Availability impact (A): HIGH

updated 6 days ago by @LeSuisse Activity log

Created suggestion 6 days, 5 hours ago
@LeSuisse ignored
4 packages
- sbclPackages.cl-rsvg2
- haskellPackages.gi-rsvg
- ocamlPackages.lablgtk3-rsvg2
- ocamlPackages_latest.lablgtk3-rsvg2
6 days ago
@LeSuisse dismissed 6 days ago

librsvg2-bin 2.40.13 Buffer Overflow via Malformed SVG

librsvg2-bin 2.40.13 contains a buffer overflow vulnerability that allows local attackers to cause a denial of service by processing malformed SVG files. Attackers can supply crafted SVG input to the rsvg conversion tool to trigger a segmentation fault in the cairo image compositor.

References

ExploitDB-44491 exploit
VulnCheck Advisory: librsvg2-bin 2.40.13 Buffer Overflow via Malformed SVG third-party-advisory

Affected products

RSVG

==2.40.13

Matching in nixpkgs

pkgs.librsvg

Small library to render SVG images to Cairo surfaces

nixos-unstable 2.61.4
- nixpkgs-unstable 2.61.4
- nixos-unstable-small 2.61.4
nixos-25.11 2.61.3
- nixos-25.11-small 2.61.3
- nixpkgs-25.11-darwin 2.61.3

Ignored packages (4)

pkgs.sbclPackages.cl-rsvg2

None

nixos-unstable rsvg2-20200925-git
- nixpkgs-unstable rsvg2-20200925-git
- nixos-unstable-small rsvg2-20200925-git
nixos-25.11 rsvg2-20200925-git
- nixos-25.11-small rsvg2-20200925-git
- nixpkgs-25.11-darwin rsvg2-20200925-git

pkgs.haskellPackages.gi-rsvg

librsvg bindings

nixos-unstable 2.0.6
- nixpkgs-unstable 2.0.6
- nixos-unstable-small 2.0.6
nixos-25.11 2.0.6
- nixos-25.11-small 2.0.6
- nixpkgs-25.11-darwin 2.0.6

pkgs.ocamlPackages.lablgtk3-rsvg2

OCaml interface to Gnome rsvg2 library

nixos-unstable lablgtk3-rsvg2-3.1.5
- nixpkgs-unstable lablgtk3-rsvg2-3.1.5
- nixos-unstable-small lablgtk3-rsvg2-3.1.5
nixos-25.11 lablgtk3-rsvg2-3.1.5
- nixos-25.11-small lablgtk3-rsvg2-3.1.5
- nixpkgs-25.11-darwin lablgtk3-rsvg2-3.1.5

pkgs.ocamlPackages_latest.lablgtk3-rsvg2