Executive brief
lunasvg v3.0.0 was discovered to contain a allocation-size-too-big bug via the component plutovg_surface_create.
Affected products
- PyPI lunasvg
Junglewise Threat Intelligence
CVE-2024-57722: PYSEC-2025-131 - lunasvg v3.0.0 was discovered to contain a allocation-size-too-big bug via the component plutovg_surface_create.
CVE-2024-57722 · Severity: low · CVSS 3.1 · Published 2025-01-23
Technologies: lunasvg (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2025-127 - lunasvg v3.0.1 was discovered to contain a segmentation violation via the component gray_find_cell
- PYSEC-2025-133 - lunasvg v3.0.0 was discovered to contain a segmentation violation via the component gray_record_cell.
- PYSEC-2025-132 - lunasvg v3.0.0 was discovered to contain a segmentation violation via the component composition_source_over.
- PYSEC-2025-130 - lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovg_path_add_path.
- PYSEC-2025-129 - lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovg_blend.