Inkscape Inkscape
11 CVEs affecting Inkscape Inkscape. Latest disclosed: 2026-03-27. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-42704 | High | 7.8 | 2022-05-18 | Inkscape version 0.91 is vulnerable to an out-of-bounds write, which may allow an attacker to arbitrary execute code. |
CVE-2026-4980 | Medium | 6.3 | 2026-03-27 | A local file disclosure vulnerability in the XInclude processing component of Inkscape 1.1 before 1.3 allows a remote attacker to read local files via a crafte… |
CVE-2012-5656 | Medium | 5.5 | 2013-01-18 | The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external entity in a SVG file, aka an XML external entity… |
CVE-2021-42702 | Low | 3.3 | 2022-05-18 | Inkscape version 0.91 can access an uninitialized pointer, which may allow an attacker to have access to unauthorized information. |
CVE-2021-42700 | Low | 3.3 | 2022-05-18 | Inkscape 0.91 is vulnerable to an out-of-bounds read, which may allow an attacker to have access to unauthorized information. |
CVE-2025-15523 | | 2026-01-22 | MacOS version of Inkscape bundles a Python interpreter that inherits the Transparency, Consent, and Control (TCC) permissions granted by the user to the main a… | |
CVE-2012-6076 | | 2013-03-12 | Inkscape before 0.48.4 reads .eps files from /tmp instead of the current directory, which might cause Inkspace to process unintended files, allow local users t… | |
CVE-2007-1464 | | 2007-03-21 | Format string vulnerability in the whiteboard Jabber protocol in Inkscape before 0.45.1 allows user-assisted remote attackers to execute arbitrary code via uns… | |
CVE-2007-1463 | | 2007-03-21 | Format string vulnerability in Inkscape before 0.45.1 allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a URI, wh… | |
CVE-2005-3885 | | 2005-11-29 | The ps2epsi extension shell script (ps2epsi.sh) in Inkscape before 0.41 allows local users to overwrite arbitrary files via a symlink attack on the tmpepsifile… | |
CVE-2005-3737 | | 2005-11-22 | Buffer overflow in the SVG importer (style.cpp) of inkscape 0.41 through 0.42.2 might allow remote attackers to execute arbitrary code via a SVG file with long… |