VULNERABILITY INTELLIGENCE

CVE-2016-4348

CVSS score7.5 HIGH

EPSS probability2.36%

CISA KEVNot currently listed

Published2016-05-20

Last modified2026-06-17

Description

The _rsvg_css_normalize_font_size function in librsvg 2.40.2 allows context-dependent attackers to cause a denial of service (stack consumption and application crash) via circular definitions in an SVG document.