Skip to main content
VulnerabilityPublished Updated

_blit_xrgb32_lerp_spans · Librsvg: UNKNOWN READ

Affects librsvgSource GCVE Database

0
Severity
Medium

Rated by Threat Radar

Data as of 18 Oct 2026, 01:41 UTC

What to do

Affected software

ProductAffectedFixed in
OSS-Fuzzlibrsvgpkg:generic/librsvgOther threatsAffected
  • >=954e26db28e6f651bc37e2221fb8bea58888b579
  • =2.58.92
  • =2.58.93
  • =2.58.94
  • =2.59.0
  • =2.59.0-beta.2
  • =2.59.0-beta.3
  • =2.59.0-beta.4
  • =2.59.1
  • =2.59.2
  • =2.59.90
  • =2.59.91
  • =2.60.0
  • =2.60.0-beta.0
  • =2.60.0-beta.1
  • =2.61.0
  • =2.61.1
  • =2.61.2
  • =2.61.3
  • =2.60.1
  • =2.61.90
  • =2.62.0-beta.0
  • =2.60.2
  • =2.61.91
  • =2.62.0-beta.1
  • =2.61.4
  • =2.61.92
  • =2.62.0-beta.2
  • =2.62.0
  • =2.62.1
  • =2.62.2
  • =2.62.3
  • =2.62.90
  • =2.63.0-beta.0
  • =2.62.91
  • =2.63.0-beta.1
  • =2.63.0
  • =2.60.3
  • =2.61.5
  • =2.62.4
  • =2.63.1
  • =2.63.2
  • =2.63.3
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Until a fix is available, users should consider avoiding the affected versions or applying any vendor-recommended mitigations once published. Monitoring OSS-Fuzz and official librsvg channels for updates is advised.

Description

A memory safety issue has been reported in librsvg involving an UNKNOWN READ crash in the _blit_xrgb32_lerp_spans function. The crash was identified through OSS-Fuzz testing and involves the rendering pipeline functions _blit_xrgb32_lerp_spans, _cairo_rectangular_scan_converter_generate, and composite_boxes. The vulnerability affects multiple specific versions of librsvg from 2.58.92 through 2.63.3. No CVSS score is assigned, and no known exploits or patches are currently documented.

References

Community reviews

Loading reviews…