Junglewise Threat Intelligence

CVE-2023-50251: Denial of service caused by infinite recursion when parsing SVG document

CVE-2023-50251 · Severity: low · CVSS 3.1 · Published 2023-12-13

Technologies: phenx/php-svg-lib (Packagist). Vendors: Packagist.

Executive brief

Denial of service caused by infinite recursion when parsing SVG document

Affected products

Packagist phenx/php-svg-lib

Related threats

Dompdf's usage of vulnerable version of phenx/php-svg-lib leads to restriction bypass and potential RCE
php-svg-lib lacks path validation on font through SVG inline styles