High severity7.5NVD Advisory· Published May 20, 2016· Updated Jun 17, 2026

CVE-2016-4348

Description

The _rsvg_css_normalize_font_size function in librsvg 2.40.2 allows context-dependent attackers to cause a denial of service (stack consumption and application crash) via circular definitions in an SVG document.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

GNOME Foundation/Librsvg
cpe:2.3:a:gnome:librsvg:*:*:*:*:*:*:*:*
Range: <=2.40.1
Debian/linux
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
OpenSUSE/Leap
cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*
OpenSUSE/openSUSE
cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

lists.opensuse.org/opensuse-updates/2016-05/msg00079.htmlnvdThird Party Advisory
www.debian.org/security/2016/dsa-3584nvdThird Party Advisory
git.gnome.org/browse/librsvg/commit/nvdVendor Advisory
www.openwall.com/lists/oss-security/2016/04/28/4nvd
www.openwall.com/lists/oss-security/2016/04/28/7nvd
www.openwall.com/lists/oss-security/2016/04/30/3nvd
www.openwall.com/lists/oss-security/2016/05/10/15nvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000