Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

librsvg2 may crash or be hijacked by crafted SVG

published 19 days ago

Summary

The librsvg2 graphics library can mishandle specially crafted SVG files that contain repeated internal references, causing it to free memory still in use. This can make the application stop working or allow an attacker to run unwanted code. Update the library to the latest version provided by your vendor to fix the issue.

What to do

Update openeuler librsvg2 to version 2.57.1-7.oe2403sp3.

Affected software

Ecosystem	Vendor	Product	Affected versions
openEuler:24.03-LTS-SP3	openeuler	librsvg2	< 2.57.1-7.oe2403sp3 Fix: upgrade to 2.57.1-7.oe2403sp3

Original advisory text

librsvg2 security update

An SVG library based on cairo.

Security Fix(es):

A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entity that is still in use by the parser. An attacker could potentially exploit this to cause a denial of service or execute arbitrary code.(CVE-2026-96889)

References

https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA... Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-96889 Vendor Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

7.8 High

Timeline

Published16 Oct 2026

Updated16 Oct 2026

First seen16 Oct 2026

Sources

OESA-2026-4264 · OSV

Track software like this

Free during beta