Lunasvg CVE-2024-33767

MEDIUM

Out-of-bounds Read (CWE-125)

2024-05-01 cve@mitre.org

Buffer Overflow Information Disclosure Lunasvg

5.0

CVSS 3.1 · Vendor: mitre

Share

Severity by source

Vendor (mitre) PRIMARY

5.0 MEDIUM

AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

Primary rating from Vendor (mitre) · only source for this CVE.

CVSS VectorVendor: mitre

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

1

CVE Published

May 01, 2024 - 03:15 cve.org

MEDIUM 5.0

DescriptionCVE.org

lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source.

AnalysisAI

lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source. Rated medium severity (CVSS 5.0), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified as Out-of-bounds Read (CWE-125), which allows attackers to read data from memory outside the intended buffer boundaries. lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source. Affected products include: Sammycage Lunasvg.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Validate array indices and buffer lengths. Use memory-safe languages. Enable AddressSanitizer during testing.

More in Lunasvg

View all

CVE-2024-33768 CRITICAL Act Now POC

lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source_over. Rated

CVE-2024-33763 HIGH This Week POC

lunasvg v2.3.9 was discovered to contain a stack-buffer-underflow at lunasvg/source/layoutcontext.cpp. Rated high severi

CVE-2024-33764 MEDIUM This Month POC

lunasvg v2.3.9 was discovered to contain a stack-overflow at lunasvg/source/element.h. Rated medium severity (CVSS 5.5),

CVE-2024-33766 MEDIUM This Month POC

lunasvg v2.3.9 was discovered to contain an FPE (Floating Point Exception) at blend_transformed_tiled_argb.isra.0. Rated

CVE-2024-55456 MEDIUM This Week POC

lunasvg v3.0.1 was discovered to contain a segmentation violation via the component gray_find_cell. Rated medium severit

CVE-2024-57724 MEDIUM This Week POC

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component gray_record_cell. Rated medium sever

CVE-2024-57723 MEDIUM This Week POC

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component composition_source_over. Rated mediu

CVE-2024-57722 HIGH This Month POC

lunasvg v3.0.0 was discovered to contain a allocation-size-too-big bug via the component plutovg_surface_create. Rated h

CVE-2024-57721 MEDIUM This Week POC

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovg_path_add_path. Rated medium

CVE-2024-57720 MEDIUM This Week POC

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovg_blend. Rated medium severity

CVE-2024-57719 MEDIUM This Week POC

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component blend_transformed_tiled_argb.isra.0.

Same weakness CWE-125 – Out-of-bounds Read

View all

CVE-2014-0160 HIGH POC

CVE-2016-5198 HIGH POC

CVE-2016-1646 HIGH POC

CVE-2025-5777 HIGH POC

CVE-2017-5030 HIGH POC

CVE-2016-4523 HIGH

CVE-2024-48456 HIGH POC

CVE-2024-48457 HIGH POC

Same technique Buffer Overflow

View all

CVE-2017-7269 CRITICAL POC

CVE-2015-5119 CRITICAL POC

CVE-2015-3113 CRITICAL POC

CVE-2011-2462 CRITICAL POC

CVE-2009-0927 HIGH POC

CVE-2012-1889 HIGH POC

CVE-2017-11882 HIGH POC

CVE-2010-3333 HIGH POC

Share

CVE-2024-33767 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy