Skip to main content

Lunasvg CVE-2024-33766

MEDIUM
Divide By Zero (CWE-369)
2024-05-01 cve@mitre.org
Information Disclosure Lunasvg
5.3
CVSS 3.1 · Vendor: mitre
Share

Severity by source

Vendor (mitre) PRIMARY
5.3 MEDIUM
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Primary rating from Vendor (mitre) · only source for this CVE.

CVSS VectorVendor: mitre

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
Low

Lifecycle Timeline

1
CVE Published
May 01, 2024 - 03:15 cve.org
MEDIUM 5.3

DescriptionCVE.org

lunasvg v2.3.9 was discovered to contain an FPE (Floating Point Exception) at blend_transformed_tiled_argb.isra.0.

AnalysisAI

lunasvg v2.3.9 was discovered to contain an FPE (Floating Point Exception) at blend_transformed_tiled_argb.isra.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-369. lunasvg v2.3.9 was discovered to contain an FPE (Floating Point Exception) at blend_transformed_tiled_argb.isra.0. Affected products include: Sammycage Lunasvg.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Lunasvg

View all
CVE-2024-33768 CRITICAL POC
9.8 May 01

lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source_over. Rated
CVE-2024-33763 HIGH POC
7.5 May 01

lunasvg v2.3.9 was discovered to contain a stack-buffer-underflow at lunasvg/source/layoutcontext.cpp. Rated high severi
CVE-2024-33764 MEDIUM POC
5.5 May 01

lunasvg v2.3.9 was discovered to contain a stack-overflow at lunasvg/source/element.h. Rated medium severity (CVSS 5.5),
CVE-2024-33767 MEDIUM POC
5.0 May 01

lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source. Rated medi
CVE-2024-55456 MEDIUM POC
6.5 Feb 03

lunasvg v3.0.1 was discovered to contain a segmentation violation via the component gray_find_cell. Rated medium severit
CVE-2024-57724 MEDIUM POC
6.5 Jan 23

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component gray_record_cell. Rated medium sever
CVE-2024-57723 MEDIUM POC
6.5 Jan 23

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component composition_source_over. Rated mediu
CVE-2024-57722 HIGH POC
7.5 Jan 23

lunasvg v3.0.0 was discovered to contain a allocation-size-too-big bug via the component plutovg_surface_create. Rated h
CVE-2024-57721 MEDIUM POC
6.5 Jan 23

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovg_path_add_path. Rated medium

CVE-2024-57720 MEDIUM POC
6.5 Jan 23

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovg_blend. Rated medium severity
CVE-2024-57719 MEDIUM POC
6.5 Jan 23

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component blend_transformed_tiled_argb.isra.0.

Same weakness CWE-369 – Divide By Zero

View all
CVE-2017-11720 CRITICAL POC
9.8
CVE-2012-0207 HIGH POC
7.5
CVE-2017-7598 HIGH POC
7.8
CVE-2016-3623 HIGH POC
7.5
CVE-2023-3896 HIGH POC
7.8
CVE-2023-1127 HIGH POC
7.8
CVE-2023-0512 HIGH POC
7.8
CVE-2021-29600 HIGH POC
7.8

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2024-33766 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy