USN-6178-1

Dashboard / Vulnerabilities / USN-6178-1

USN-6178-1

Summary: Several security issues were fixed in SVG++ library

Details: It was discovered that in SVG++ library that the demo application incorrectly managed memory resulting in a memory access violation under certain circumstances. An attacker could possibly use this issue to leak memory information or run a denial of service attack. This issue only affected Ubuntu 18.04 LTS. (CVE-2019-6246) It was discovered that in SVG++ library that the demo application incorrectly handled null pointers under certain circumstances. An attacker could possibly use this issue to cause denial of service, leak memory information or manipulate program execution flow. (CVE-2021-44960)

References: https://ubuntu.com/security/notices/USN-6178-1, https://ubuntu.com/security/CVE-2019-6246, https://ubuntu.com/security/CVE-2021-44960