Vulnerability Description
A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entity that is still in use by the parser. An attacker could potentially exploit this to cause a denial of service or execute arbitrary code.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://access.redhat.com/security/cve/CVE-2026-96889
- https://bugzilla.redhat.com/show_bug.cgi?id=2539279
- https://crates.io/crates/librsvg
- https://gitlab.gnome.org/GNOME/librsvg/-/work_items/1241
- https://rustsec.org/advisories/RUSTSEC-2026-0305.html
- https://gitlab.gnome.org/GNOME/librsvg/-/work_items/1241
FAQ
What is CVE-2026-96889?
CVE-2026-96889 is a vulnerability with a CVSS score of 7.8 (HIGH). A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. This vulnerability arise...
How severe is CVE-2026-96889?
CVE-2026-96889 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-96889?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.