CVE-2016-6163

Name of the Vulnerable Software and Affected Versions librsvg2 version 2.40.2

Description The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds read, by providing a crafted svg file. This is related to the rsvg pattern fix fallback function in rsvg-paint server.c.

Recommendations For librsvg2 version 2.40.2, consider updating to a newer version that contains a fix for this issue, as using a crafted svg file can lead to a denial of service. At the moment, there is no information about a newer version that contains a fix for this vulnerability.