High severity7.5NVD Advisory· Published May 20, 2016· Updated Jun 17, 2026
CVE-2015-7558
CVE-2015-7558
Description
librsvg before 2.40.12 allows context-dependent attackers to cause a denial of service (infinite loop, stack consumption, and application crash) via cyclic references in an SVG document.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
librsvgcrates.io | < 2.40.12 | 2.40.12 |
Affected products
3Patches
Vulnerability mechanics
References
7- www.debian.org/security/2016/dsa-3584nvdThird Party AdvisoryWEB
- www.openwall.com/lists/oss-security/2015/12/21/5nvdMailing ListThird Party AdvisoryWEB
- www.openwall.com/lists/oss-security/2016/04/30/3nvdMailing ListThird Party AdvisoryWEB
- git.gnome.org/browse/librsvg/commit/nvdVendor AdvisoryWEB
- github.com/advisories/GHSA-j984-q4qc-6qxfghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2015-7558ghsaADVISORY
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingWEB
News mentions
0No linked articles in our index yet.