Lunasvg CVE-2024-33763

HIGH

Out-of-bounds Read (CWE-125)

2024-05-01 cve@mitre.org

Buffer Overflow Information Disclosure Lunasvg

7.5

CVSS 3.1 · Vendor: mitre

Share

Severity by source

Vendor (mitre) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from Vendor (mitre) · only source for this CVE.

CVSS VectorVendor: mitre

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

1

CVE Published

May 01, 2024 - 03:15 cve.org

HIGH 7.5

DescriptionCVE.org

lunasvg v2.3.9 was discovered to contain a stack-buffer-underflow at lunasvg/source/layoutcontext.cpp.

AnalysisAI

lunasvg v2.3.9 was discovered to contain a stack-buffer-underflow at lunasvg/source/layoutcontext.cpp. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified as Out-of-bounds Read (CWE-125), which allows attackers to read data from memory outside the intended buffer boundaries. lunasvg v2.3.9 was discovered to contain a stack-buffer-underflow at lunasvg/source/layoutcontext.cpp. Affected products include: Sammycage Lunasvg.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Validate array indices and buffer lengths. Use memory-safe languages. Enable AddressSanitizer during testing.

More in Lunasvg

View all

CVE-2024-33768 CRITICAL Act Now POC

lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source_over. Rated

CVE-2024-33764 MEDIUM This Month POC

lunasvg v2.3.9 was discovered to contain a stack-overflow at lunasvg/source/element.h. Rated medium severity (CVSS 5.5),

CVE-2024-33766 MEDIUM This Month POC

lunasvg v2.3.9 was discovered to contain an FPE (Floating Point Exception) at blend_transformed_tiled_argb.isra.0. Rated

CVE-2024-33767 MEDIUM This Month POC

lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source. Rated medi

CVE-2024-55456 MEDIUM This Week POC

lunasvg v3.0.1 was discovered to contain a segmentation violation via the component gray_find_cell. Rated medium severit

CVE-2024-57724 MEDIUM This Week POC

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component gray_record_cell. Rated medium sever

CVE-2024-57723 MEDIUM This Week POC

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component composition_source_over. Rated mediu

CVE-2024-57722 HIGH This Month POC

lunasvg v3.0.0 was discovered to contain a allocation-size-too-big bug via the component plutovg_surface_create. Rated h

CVE-2024-57721 MEDIUM This Week POC

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovg_path_add_path. Rated medium

CVE-2024-57720 MEDIUM This Week POC

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovg_blend. Rated medium severity

CVE-2024-57719 MEDIUM This Week POC

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component blend_transformed_tiled_argb.isra.0.

Same weakness CWE-125 – Out-of-bounds Read

View all

CVE-2014-0160 HIGH POC

CVE-2016-5198 HIGH POC

CVE-2016-1646 HIGH POC

CVE-2025-5777 HIGH POC

CVE-2017-5030 HIGH POC

CVE-2016-4523 HIGH

CVE-2024-48456 HIGH POC

CVE-2024-48457 HIGH POC

Same technique Buffer Overflow

View all

CVE-2017-7269 CRITICAL POC

CVE-2015-5119 CRITICAL POC

CVE-2015-3113 CRITICAL POC

CVE-2011-2462 CRITICAL POC

CVE-2009-0927 HIGH POC

CVE-2012-1889 HIGH POC

CVE-2017-11882 HIGH POC

CVE-2010-3333 HIGH POC

Share

CVE-2024-33763 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy