CVE-2019-6246

Name of the Vulnerable Software and Affected Versions svgpp version 1.2.3

Description An issue was discovered in the Generic Image Library in Boost, where after calling the gil::get color function, the return code is used as an address. This leads to an Access Violation due to an out-of-bounds read.

Recommendations For svgpp version 1.2.3, consider restricting the use of the gil::get color function until a patch is available. As a temporary workaround, review the code to ensure that the return code from gil::get color is properly validated before being used as an address.