{"id":"CVE-2016-6163","details":"The rsvg_pattern_fix_fallback function in rsvg-paint_server.c in librsvg2 2.40.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted svg file.","modified":"2026-07-08T12:27:28.468314Z","published":"2017-02-03T15:59:00.493Z","references":[{"type":"ADVISORY","url":"http://www.openwall.com/lists/oss-security/2016/07/04/3"},{"type":"ADVISORY","url":"http://www.openwall.com/lists/oss-security/2016/07/05/9"},{"type":"FIX","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353520"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/gnome/librsvg","events":[{"introduced":"02cb19835cb52bd84b0b5eaca1b4d6338417d261"},{"last_affected":"02cb19835cb52bd84b0b5eaca1b4d6338417d261"}],"database_specific":{"cpe":"cpe:2.3:a:gnome:librsvg:2.40.2:*:*:*:*:*:*:*","extracted_events":[{"introduced":"2.40.2"},{"last_affected":"2.40.2"}],"source":"CPE_STRING"}}],"versions":["2.40.2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-6163.json"}},{"ranges":[{"type":"GIT","repo":"https://gitlab.gnome.org/gnome/librsvg","events":[{"introduced":"02cb19835cb52bd84b0b5eaca1b4d6338417d261"},{"last_affected":"02cb19835cb52bd84b0b5eaca1b4d6338417d261"}],"database_specific":{"cpe":"cpe:2.3:a:gnome:librsvg:2.40.2:*:*:*:*:*:*:*","extracted_events":[{"introduced":"2.40.2"},{"last_affected":"2.40.2"}],"source":"CPE_STRING"}}],"versions":["2.40.2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-6163.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}]}