VDB

DEBIAN-CVE-2022-41704

DEBIAN-CVE-2022-41704 PUBLISHED CVSS 7.5 HIGH

A vulnerability in Batik of Apache XML Graphics allows an attacker to run untrusted Java code from an SVG. This issue affects Apache XML Graphics prior to 1.16. It is recommended to update to version 1.16.

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected Products

VendorProductVersions
Debian:14batik0, 0, 0
Debian:12batik0, 0, 0
Debian:11batik0, 1.12-4, 1.12-4
Debian:13batik0, 0, 0

Timeline

  • Oct 25, 2022 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›