Executive brief
lunasvg v2.3.9 was discovered to contain a stack-overflow at lunasvg/source/element.h.
Affected products
- PyPI lunasvg
Junglewise Threat Intelligence
CVE-2024-33764: PYSEC-2024-282 - lunasvg v2.3.9 was discovered to contain a stack-overflow at lunasvg/source/element.h.
CVE-2024-33764 · Severity: low · CVSS 3.1 · Published 2024-05-01
Technologies: lunasvg (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2025-127 - lunasvg v3.0.1 was discovered to contain a segmentation violation via the component gray_find_cell
- PYSEC-2025-133 - lunasvg v3.0.0 was discovered to contain a segmentation violation via the component gray_record_cell.
- PYSEC-2025-132 - lunasvg v3.0.0 was discovered to contain a segmentation violation via the component composition_source_over.
- PYSEC-2025-131 - lunasvg v3.0.0 was discovered to contain a allocation-size-too-big bug via the component plutovg_surface_create.
- PYSEC-2025-130 - lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovg_path_add_path.