CVE-2018-17332: LIBSVG2 Project LIBSVG2

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

An issue was discovered in libsvg2 through 2012-10-19. The svgGetNextPathField function in svg_string.c returns its input pointer in certain circumstances, which might result in a memory leak caused by wasteful malloc calls.

Affected products

• LIBSVG2 Project LIBSVG2: up to and including 2012-10-19

Published 2018-09-22. Last modified 2026-06-17.