CVE-2019-6245

Vulnerability

An issue exists in Anti-Grain Geometry (AGG) 2.4, as used in SVG++ 1.2.3. In the function agg::cell_aa::not_equal, the value dx is computed as (x2 - x1). If dx >= dx_limit (where dx_limit is 16384 << poly_subpixel_shift), the function calls itself recursively. Under certain conditions, dx always exceeds the limit, leading to infinite recursion and eventual stack consumption [1].

Exploitation

Exploitation requires a crafted SVG file that triggers the recursive condition when rendered. No authentication is needed, but user interaction is required to open the malicious file. The recursion causes uncontrolled stack growth, consuming all available stack space [1]. Specific input details are not publicly disclosed beyond the issue report.

Impact

Successful exploitation results in a denial of service (DoS) due to stack overflow. This can crash the application or render it unresponsive, potentially affecting availability.

Mitigation

As of the reference [1], no official patch has been released. Users should avoid processing untrusted SVG files or consider using alternative libraries. This CVE is not listed in the Known Exploited Vulnerabilities (KEV) catalog.