Vulnerabilities > CVE-2017-1000498 - XXE vulnerability in Androidsvg Project Androidsvg 1.2.2
Attack vector
LOCAL Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
AndroidSVG version 1.2.2 is vulnerable to XXE attacks in the SVG parsing component resulting in denial of service and possibly remote code execution
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |