lunasvg Segmentation Fault Vulnerability in Version 3.0.0

A segmentation fault vulnerability has been identified in lunasvg version 3.0.0. This issue arises in the 'blend_transformed_tiled_argb.isra.0' component, where improper handling of memory access leads to a crash. The vulnerability is triggered by a read memory access violation, specifically referencing an address in the zero page, which is not permissible.

Impact

Exploitation of this vulnerability causes a segmentation fault, leading to a crash of the application.

Reproduction

The vulnerability can be reproduced using the 'svg2png' command-line tool included with lunasvg. After compiling lunasvg with AddressSanitizer enabled, the tool can be used to process an SVG file that triggers the vulnerability. This specific file should be referenced in the 'SEGV-blend_transformed_tiled_argb.isra.0' file within the same repository.