CVE-2015-7558: Debian Linux

High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days.

librsvg before 2.40.12 allows context-dependent attackers to cause a denial of service (infinite loop, stack consumption, and application crash) via cyclic references in an SVG document.

Affected products

• Debian Debian Linux: version 8.0 only
• Gnome Librsvg: up to and including 2.40.11

Published 2016-05-20. Last modified 2026-06-17.