Sammycage Lunasvg — known CVE vulnerabilities

Every CVE whose affected-product data names Sammycage Lunasvg, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (12)

• CVE-2024-33768 — CVSS 9.8 (critical): lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source_over.
• CVE-2024-33763 — CVSS 7.5 (high): lunasvg v2.3.9 was discovered to contain a stack-buffer-underflow at lunasvg/source/layoutcontext.cpp.
• CVE-2024-57722 — CVSS 7.5 (high): lunasvg v3.0.0 was discovered to contain a allocation-size-too-big bug via the component plutovg_surface_create.
• CVE-2024-57724 — CVSS 6.5 (medium): lunasvg v3.0.0 was discovered to contain a segmentation violation via the component gray_record_cell.
• CVE-2024-57720 — CVSS 6.5 (medium): lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovg_blend.
• CVE-2024-57721 — CVSS 6.5 (medium): lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovg_path_add_path.
• CVE-2024-57723 — CVSS 6.5 (medium): lunasvg v3.0.0 was discovered to contain a segmentation violation via the component composition_source_over.
• CVE-2024-55456 — CVSS 6.5 (medium): lunasvg v3.0.1 was discovered to contain a segmentation violation via the component gray_find_cell
• CVE-2024-57719 — CVSS 6.5 (medium): lunasvg v3.0.0 was discovered to contain a segmentation violation via the component blend_transformed_tiled_argb.isra.0.
• CVE-2024-33764 — CVSS 5.5 (medium): lunasvg v2.3.9 was discovered to contain a stack-overflow at lunasvg/source/element.h.
• CVE-2024-33766 — CVSS 5.3 (medium): lunasvg v2.3.9 was discovered to contain an FPE (Floating Point Exception) at blend_transformed_tiled_argb.isra.0.
• CVE-2024-33767 — CVSS 5.0 (medium): lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source.