high7.8
CVE-2017-1000498
AndroidSVG version 1.2.2 is vulnerable to XXE attacks in the SVG parsing component resulting in denial of service and possibly remote code execution
Impact
AndroidSVG version 1.2.2 is vulnerable to XXE attacks in the SVG parsing component resulting in denial of service and possibly remote code execution
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Androidsvg Project | Androidsvg | Version 1.2.2 |