Critical severity9.8NVD Advisory· Published Dec 14, 2023· Updated Jun 17, 2026

CVE-2023-44709

Description

PlutoSVG commit 336c02997277a1888e6ccbbbe674551a0582e5c4 and before was discovered to contain an integer overflow via the component plutosvg_load_from_memory.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Sammycage/Plutosvg
cpe:2.3:a:sammycage:plutosvg:-:*:*:*:*:*:*:*
PlutoSVG/plutosvgcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <=336c02997277a1888e6ccbbbe674551a0582e5c4

Patches

Vulnerability mechanics

References

github.com/sammycage/plutosvg/issues/7nvdExploitIssue Tracking
gist.github.com/sunwithmoon/3f810c27d2e553f9d31bd7c50566f15bnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000