Количество 16
Количество 16
BDU:2026-17157
Уязвимость библиотеки отрисовки векторной графики librsvg, связанная с использованием памяти после освобождения, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании
CVE-2026-96889
A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entity that is still in use by the parser. An attacker could potentially exploit this to cause a denial of service or execute arbitrary code.
CVE-2026-96889
A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entity that is still in use by the parser. An attacker could potentially exploit this to cause a denial of service or execute arbitrary code.
CVE-2026-96889
A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entity that is still in use by the parser. An attacker could potentially exploit this to cause a denial of service or execute arbitrary code.
CVE-2026-96889
Librsvg: use-after-free when xml includes have duplicated entities
CVE-2026-96889
A flaw was found in librsvg. When processing an SVG document containin ...
openSUSE-SU-2026:22051-1
Security update for librsvg
RLSA-2026:86921
Important: librsvg2 security update
RLSA-2026:86842
Important: librsvg2 security update
RLSA-2026:86841
Important: librsvg2 security update
RLSA-2026:86331
Important: glycin-loaders security update
GHSA-cpvr-w4j5-2mpg
Librsvg: Use-after-free when XML includes have duplicated entities
ELSA-2026-86921
ELSA-2026-86921: librsvg2 security update (IMPORTANT)
ELSA-2026-86842
ELSA-2026-86842: librsvg2 security update (IMPORTANT)
ELSA-2026-86841
ELSA-2026-86841: librsvg2 security update (IMPORTANT)
ELSA-2026-86331
ELSA-2026-86331: glycin-loaders security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
BDU:2026-17157 Уязвимость библиотеки отрисовки векторной графики librsvg, связанная с использованием памяти после освобождения, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании | CVSS3: 7.8 | 1% Низкий | около 1 месяца назад | |
CVE-2026-96889 A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entity that is still in use by the parser. An attacker could potentially exploit this to cause a denial of service or execute arbitrary code. | CVSS3: 7.8 | 1% Низкий | около 1 месяца назад | |
CVE-2026-96889 A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entity that is still in use by the parser. An attacker could potentially exploit this to cause a denial of service or execute arbitrary code. | CVSS3: 7.8 | 1% Низкий | около 1 месяца назад | |
CVE-2026-96889 A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entity that is still in use by the parser. An attacker could potentially exploit this to cause a denial of service or execute arbitrary code. | CVSS3: 7.8 | 1% Низкий | около 1 месяца назад | |
CVE-2026-96889 Librsvg: use-after-free when xml includes have duplicated entities | CVSS3: 7.8 | 1% Низкий | 29 дней назад | |
CVE-2026-96889 A flaw was found in librsvg. When processing an SVG document containin ... | CVSS3: 7.8 | 1% Низкий | около 1 месяца назад | |
openSUSE-SU-2026:22051-1 Security update for librsvg | 1% Низкий | 20 дней назад | ||
RLSA-2026:86921 Important: librsvg2 security update | 1% Низкий | 6 дней назад | ||
RLSA-2026:86842 Important: librsvg2 security update | 1% Низкий | 6 дней назад | ||
RLSA-2026:86841 Important: librsvg2 security update | 1% Низкий | 6 дней назад | ||
RLSA-2026:86331 Important: glycin-loaders security update | 1% Низкий | 6 дней назад | ||
GHSA-cpvr-w4j5-2mpg Librsvg: Use-after-free when XML includes have duplicated entities | CVSS3: 7.8 | 1% Низкий | 5 дней назад | |
ELSA-2026-86921 ELSA-2026-86921: librsvg2 security update (IMPORTANT) | 1% Низкий | 7 дней назад | ||
ELSA-2026-86842 ELSA-2026-86842: librsvg2 security update (IMPORTANT) | 1% Низкий | 7 дней назад | ||
ELSA-2026-86841 ELSA-2026-86841: librsvg2 security update (IMPORTANT) | 1% Низкий | 7 дней назад | ||
ELSA-2026-86331 ELSA-2026-86331: glycin-loaders security update (IMPORTANT) | 1% Низкий | 8 дней назад |
Уязвимостей на страницу