EUVD-2026-85608Published

Librsvg: use-after-free when xml includes have duplicated entities

Explicit identifiers and source references

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-96889 · Microsoft / collected KEV context

EUVD-2026-85608

GHSA-cpvr-w4j5-2mpg

RUSTSEC-2026-0305

cve-program · CVE-2026-96889

euvd · EUVD-2026-85608

nvd · CVE-2026-96889

osv · GHSA-cpvr-w4j5-2mpg

osv · RUSTSEC-2026-0305

Related operational evidence

Explicit CVE identifiers

A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees … · Advisory content revised · 7 Nov 2026
Librsvg: use-after-free when xml includes have duplicated entities · Affected-version evidence changed · 5 Nov 2026
A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees … · Advisory content revised · 5 Nov 2026
Librsvg: use-after-free when xml includes have duplicated entities · Affected-version evidence changed · 4 Nov 2026
Librsvg: use-after-free when xml includes have duplicated entities · Affected-version evidence changed · 4 Nov 2026
A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees … · Advisory content revised · 4 Nov 2026
Librsvg: use-after-free when xml includes have duplicated entities · Affected-version evidence changed · 3 Nov 2026
A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees … · Advisory content revised · 3 Nov 2026
A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees … · Advisory content revised · 1 Nov 2026
Librsvg: use-after-free when xml includes have duplicated entities · Affected-version evidence changed · 31 Oct 2026
A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees … · Advisory content revised · 31 Oct 2026
A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees … · Advisory content revised · 30 Oct 2026
Librsvg: use-after-free when xml includes have duplicated entities · Affected-version evidence changed · 29 Oct 2026
Librsvg: use-after-free when xml includes have duplicated entities · Affected-version evidence changed · 29 Oct 2026
Librsvg: use-after-free when xml includes have duplicated entities · Affected-version evidence changed · 29 Oct 2026
A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees … · Advisory content revised · 29 Oct 2026