lunasvg Segmentation Fault Vulnerability in Version 3.0.0

A segmentation fault vulnerability has been identified in lunasvg version 3.0.0. This issue arises in the 'composition_source_over' component, where improper handling of memory access leads to a crash. The vulnerability can be reproduced using the 'svg2png' tool included with lunasvg, by processing a specially crafted SVG file that triggers the segmentation violation.

Impact

Exploitation of this vulnerability causes a segmentation fault, leading to a crash of the application.

Reproduction

The vulnerability can be reproduced by using the 'svg2png' command-line tool that comes with lunasvg. After compiling lunasvg with AddressSanitizer enabled, the tool can be run with a specific SVG file that has been crafted to exploit the vulnerability. The 'SEGV-composition_source_over' file, available in the GitHub repository 'keepinggg/poc', can be used to trigger the issue. When the file is processed, it causes a segmentation fault due to a read memory access violation, which can be observed in the AddressSanitizer output.