Lucene search

K
cvelistMitreCVELIST:CVE-2019-20446
HistoryFeb 02, 2020 - 12:00 a.m.

CVE-2019-20446

2020-02-0200:00:00
mitre
www.cve.org
8

AI Score

6.4

Confidence

High

EPSS

0.004

Percentile

73.4%

In xml.rs in GNOME librsvg before 2.46.2, a crafted SVG file with nested patterns can cause denial of service when passed to the library for processing. The attacker constructs pattern elements so that the number of final rendered objects grows exponentially.