librsvg2-bin Buffer Overflow Vulnerability in rsvg Conversion Tool

A buffer overflow vulnerability has been identified in librsvg2-bin version 2.40.13. This vulnerability allows local attackers to cause a denial-of-service condition by processing malformed SVG files. The issue arises when crafted SVG input is supplied to the rsvg conversion tool, leading to a segmentation fault in the cairo image compositor.

Impact

Exploitation of this vulnerability causes a segmentation fault, leading to a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by using the rsvg-convert tool to process a malformed SVG file. This can be done by running rsvg-convert with the crafted SVG file as input, which will trigger the buffer overflow and cause a segmentation fault.