Description
GNOME librsvg version before commit c6ddf2ed4d768fd88adbea2b63f575cd523022ea contains a Improper input validation vulnerability in rsvg-io.c that can result in the victim's Windows username and NTLM password hash being leaked to remote attackers through SMB. This attack appear to be exploitable via The victim must process a specially crafted SVG file containing an UNC path on Windows.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 7 | librsvg | 2.36.1-2+deb7u3 | DLA-1278-1 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP3 | librsvg | 2.40.20-5.6.1 | SUSE-SU-2018:1288-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 12 SP3 | librsvg | 2.40.20-5.6.1 | SUSE-SU-2018:1288-1 |
Advisories 2
- DLA-1278-1 librsvg - security update Debian Security (DSA / DLA) · Mar 9, 2026
- SUSE-SU-2018:1288-1 Security update for librsvg SUSE / openSUSE Security Updates · Feb 4, 2026