Summary
Successful exploitation of these vulnerabilities could allow unauthorized information disclosure and code execution.
Vulnerabilities 3
-
High 7.8
Inkscape Out-of-bounds Write
Inkscape version 0.91 is vulnerable to an out-of-bounds write, which may allow an attacker to arbitrary execute code.
-
Low 3.3
Inkscape Out-of-bounds Read
Inkscape 0.91 is vulnerable to an out-of-bounds read, which may allow an attacker to have access to unauthorized information.
-
Low 3.3
Inkscape Access of Uninitialized Pointer
Inkscape version 0.91 can access an uninitialized pointer, which may allow an attacker to have access to unauthorized information.
Revision history
-
#1
ICSA-22-132-03 Inkscape in Industrial Products
References
-
ICS Advisory ICSA-22-132-03 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-22-132-03
-
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/publications/emailscams_0905.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B