Sammycage

13 CVEs across 2 Sammycage products. Browse Sammycage vulnerabilities, severities, and proof-of-concept exploits.

Sammycage products with known CVEs

Product	CVEs
Lunasvg	12
Plutosvg	1

Sammycage CVEs — newest first
CVE	Severity	Score	Published	Summary
`CVE-2024-55456`	Medium	`6.5`	2025-02-03	lunasvg v3.0.1 was discovered to contain a segmentation violation via the component gray_find_cell
`CVE-2024-57724`	Medium	`6.5`	2025-01-23	lunasvg v3.0.0 was discovered to contain a segmentation violation via the component gray_record_cell.
`CVE-2024-57723`	Medium	`6.5`	2025-01-23	lunasvg v3.0.0 was discovered to contain a segmentation violation via the component composition_source_over.
`CVE-2024-57722`	High	`7.5`	2025-01-23	lunasvg v3.0.0 was discovered to contain a allocation-size-too-big bug via the component plutovg_surface_create.
`CVE-2024-57721`	Medium	`6.5`	2025-01-23	lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovg_path_add_path.
`CVE-2024-57720`	Medium	`6.5`	2025-01-23	lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovg_blend.
`CVE-2024-57719`	Medium	`6.5`	2025-01-23	lunasvg v3.0.0 was discovered to contain a segmentation violation via the component blend_transformed_tiled_argb.isra.0.
`CVE-2024-33768`	Critical	`9.8`	2024-05-01	lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source_over.
`CVE-2024-33767`	Medium	`5.0`	2024-05-01	lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source.
`CVE-2024-33766`	Medium	`5.3`	2024-05-01	lunasvg v2.3.9 was discovered to contain an FPE (Floating Point Exception) at blend_transformed_tiled_argb.isra.0.
`CVE-2024-33764`	Medium	`5.5`	2024-05-01	lunasvg v2.3.9 was discovered to contain a stack-overflow at lunasvg/source/element.h.
`CVE-2024-33763`	High	`7.5`	2024-05-01	lunasvg v2.3.9 was discovered to contain a stack-buffer-underflow at lunasvg/source/layoutcontext.cpp.
`CVE-2023-44709`	Critical	`9.8`	2023-12-14	PlutoSVG commit 336c02997277a1888e6ccbbbe674551a0582e5c4 and before was discovered to contain an integer overflow via the component plutosvg_load_from_memory.