CVE-2015-7558

librsvg before 2.40.12 allows context-dependent attackers to cause a denial of service (infinite loop, stack consumption, and application crash) via cyclic references in an SVG document.

• CWE-20

• http://www.debian.org/security/2016/dsa-3584Third Party Advisory
• http://www.openwall.com/lists/oss-security/2015/12/21/5Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/04/30/3Mailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1268243Issue Tracking
• https://git.gnome.org/browse/librsvg/commit/?id=a51919f7e1ca9c535390a746fbf6e28c8402dc61Vendor Advisory
• http://www.debian.org/security/2016/dsa-3584Third Party Advisory
• http://www.openwall.com/lists/oss-security/2015/12/21/5Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/04/30/3Mailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1268243Issue Tracking
• https://git.gnome.org/browse/librsvg/commit/?id=a51919f7e1ca9c535390a746fbf6e28c8402dc61Vendor Advisory

Published

May 20, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-7552Heap-based buffer overflow in the gdk_pixbuf_flip function i…
• CVE-2015-7553Race condition in the kernel in Red Hat Enterprise Linux 7, …
• CVE-2015-7554The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 al…
• CVE-2015-7555Heap-based buffer overflow in giffix.c in giffix in giflib 5…
• CVE-2015-7556DeleGate 9.9.13 allows local users to gain privileges as dem…7.8
• CVE-2015-7557The _rsvg_node_poly_build_path function in rsvg-shapes.c in …
• CVE-2015-7559It was found that the Apache ActiveMQ client before 5.14.5 e…2.7
• CVE-2015-7560The SMB1 implementation in smbd in Samba 3.x and 4.x before …6.5
• CVE-2015-7561Kubernetes in OpenShift3 allows remote authenticated users t…
• CVE-2015-7562Multiple cross-site scripting (XSS) vulnerabilities in TeamP…
• CVE-2015-7563Cross-site request forgery (CSRF) vulnerability in TeamPass …8.8
• CVE-2015-7564Multiple SQL injection vulnerabilities in TeamPass 2.1.24 an…