CVE-2015-7557: Gnome Librsvg

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

The _rsvg_node_poly_build_path function in rsvg-shapes.c in librsvg before 2.40.7 allows context-dependent attackers to cause a denial of service (out-of-bounds heap read) via an odd number of elements in a coordinate pair in an SVG document.

Affected products

• Gnome Librsvg: up to and including 2.40.6

Published 2016-05-20. Last modified 2026-06-17.