lunasvg Segmentation Fault Vulnerability in Version 3.0.0

A segmentation fault vulnerability has been identified in lunasvg version 3.0.0. This issue arises in the gray_record_cell component, where improper handling of memory access leads to a crash. The vulnerability can be reproduced using the 'svg2png' command-line tool included with lunasvg, which is available on GitHub.

Impact

Exploitation of this vulnerability causes a segmentation fault, leading to a crash of the application.

Reproduction

The vulnerability can be reproduced by using the 'svg2png' tool from lunasvg version 3.0.0. After compiling lunasvg with AddressSanitizer enabled, the tool can be run with a specially crafted SVG file that triggers the segmentation fault. This SVG file must be referenced in the 'SEGV-gray_record_cell' sample, available in the 'poc_of_lunasvg_3.1.0' directory of the 'keepinggg' GitHub repository.