CVE-2019-20446 vulnerability in GNOME and Other Products
Published on February 2, 2020
In xml.rs in GNOME librsvg before 2.46.2, a crafted SVG file with nested patterns can cause denial of service when passed to the library for processing. The attacker constructs pattern elements so that the number of final rendered objects grows exponentially.
Products Associated with CVE-2019-20446
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2019-20446 are published in these products:
Exploit Probability
EPSS
1.33%
Percentile
79.95%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.