CVE-2017-1000498: Androidsvg Project Androidsvg

High severity, CVSS 7.8. EPSS: 1.6% chance of exploitation in the next 30 days.

AndroidSVG version 1.2.2 is vulnerable to XXE attacks in the SVG parsing component resulting in denial of service and possibly remote code execution

Affected products

• Androidsvg Project Androidsvg: version 1.2.2 only

Published 2018-01-03. Last modified 2026-06-17.