What’s Vulnerable › Vulnerabilities

CVE-2017-1000498

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-01-03 · updated 2026-06-17
• Weakness: CWE-611

Description

AndroidSVG version 1.2.2 is vulnerable to XXE attacks in the SVG parsing component resulting in denial of service and possibly remote code execution

Affected products

• Androidsvg Project Androidsvg: 1.2.2

References

• https://github.com/BigBadaboom/androidsvg/issues/122
• https://github.com/BigBadaboom/androidsvg/issues/122

Get alerted when CVE-2017-1000498 or the next vulnerability affects your stack