lunasvg Segmentation Fault Vulnerability in Version 3.0.0

A segmentation fault vulnerability has been identified in lunasvg version 3.0.0. This issue arises from a null pointer dereference in the 'plutovg_path_add_path' function, leading to a read memory access violation. The vulnerability can be triggered by specific SVG files that cause the application to attempt to read from an invalid memory address, resulting in a crash.

Impact

Exploitation of this vulnerability causes a segmentation fault, leading to a crash of the application.

Reproduction

The vulnerability can be reproduced by using the 'svg2png' command-line tool included with lunasvg. After compiling lunasvg with AddressSanitizer enabled, the tool can be run with SVG files that trigger the segmentation fault. This can be done by specifying the SVG file name and the desired output size.

Remediation

Users can update to lunasvg version 3.1.0, where this vulnerability has been fixed.