Inkscape records

10 published records for vendor inkscape.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 3
With a fix record: 100%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

10 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
31Monitor	CVE-2021-42704No exploit	Inkscape Out-of-bounds Writeinkscape · inkscape · CWE-787 Memory safety	High7.8	—	1.5%	May 18, 2022
28Monitor	CVE-2007-1463No exploit	Format string vulnerability in Inkscape before 0.45.1 allows user-assisted remote attackers to execute arbitrary code via format string specinkscape · inkscape pre-auth RCE	Medium6.8	—	3.3%	Mar 21, 2007
28Monitor	CVE-2007-1464No exploit	Format string vulnerability in the whiteboard Jabber protocol in Inkscape before 0.45.1 allows user-assisted remote attackers to execute arbinkscape · inkscape pre-auth RCE	Medium6.8	—	3.2%	Mar 21, 2007
25Monitor	CVE-2026-4980No exploit	Improper Restriction of XML External Entity Reference in Inkscapeinkscape · inkscape · CWE-611 XXE	Medium6.3	—	0.2%	Mar 27, 2026
24Monitor	CVE-2005-3737Proof of concept	Buffer overflow in the SVG importer (style.cpp) of inkscape 0.41 through 0.42.2 might allow remote attackers to execute arbitrary code via ainkscape · inkscape pre-auth RCE	Medium5.1	—	13.4%	Nov 21, 2005
22Monitor	CVE-2012-5656No exploit	The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external entity in a SVG file, aka an inkscape · inkscape · CWE-611 XXE	Medium5.5	—	1.1%	Jan 18, 2013
17Monitor	CVE-2012-6076No exploit	Inkscape before 0.48.4 reads .eps files from /tmp instead of the current directory, which might cause Inkspace to process unintended files, inkscape · inkscape · CWE-264	Medium4.4	—	0.4%	Mar 12, 2013
13Monitor	CVE-2021-42702No exploit	Inkscape Access of Uninitialized Pointerinkscape · inkscape · CWE-824 Memory safety	Low3.3	—	0.9%	May 18, 2022
13Monitor	CVE-2021-42700No exploit	Inkscape Out-of-bounds Readinkscape · inkscape · CWE-125 Memory safety	Low3.3	—	0.8%	May 18, 2022
8Monitor	CVE-2005-3885No exploit	The ps2epsi extension shell script (ps2epsi.sh) in Inkscape before 0.41 allows local users to overwrite arbitrary files via a symlink attackinkscape · inkscape	Low2.1	—	0.3%	Nov 29, 2005

CVE-2021-42704
31Monitor
Inkscape Out-of-bounds Write
HighCVSS 7.8No exploitEPSS 1%
- Memory safety
inkscape · inkscapeMay 18, 2022
CVE-2007-1463
28Monitor
Format string vulnerability in Inkscape before 0.45.1 allows user-assisted remote attackers to execute arbitrary code via format string spec
MediumCVSS 6.8No exploitEPSS 3%
- pre-auth RCE
inkscape · inkscapeMar 21, 2007
CVE-2007-1464
28Monitor
Format string vulnerability in the whiteboard Jabber protocol in Inkscape before 0.45.1 allows user-assisted remote attackers to execute arb
MediumCVSS 6.8No exploitEPSS 3%
- pre-auth RCE
inkscape · inkscapeMar 21, 2007
CVE-2026-4980
25Monitor
Improper Restriction of XML External Entity Reference in Inkscape
MediumCVSS 6.3No exploitEPSS 0%
- XXE
inkscape · inkscapeMar 27, 2026
CVE-2005-3737
24Monitor
Buffer overflow in the SVG importer (style.cpp) of inkscape 0.41 through 0.42.2 might allow remote attackers to execute arbitrary code via a
MediumCVSS 5.1Proof of conceptEPSS 13%
- pre-auth RCE
inkscape · inkscapeNov 21, 2005
CVE-2012-5656
22Monitor
The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external entity in a SVG file, aka an
MediumCVSS 5.5No exploitEPSS 1%
- XXE
inkscape · inkscapeJan 18, 2013
CVE-2012-6076
17Monitor
Inkscape before 0.48.4 reads .eps files from /tmp instead of the current directory, which might cause Inkspace to process unintended files,
MediumCVSS 4.4No exploitEPSS 0%
inkscape · inkscapeMar 12, 2013
CVE-2021-42702
13Monitor
Inkscape Access of Uninitialized Pointer
LowCVSS 3.3No exploitEPSS 0%
- Memory safety
inkscape · inkscapeMay 18, 2022
CVE-2021-42700
13Monitor
Inkscape Out-of-bounds Read
LowCVSS 3.3No exploitEPSS 0%
- Memory safety
inkscape · inkscapeMay 18, 2022
CVE-2005-3885
8Monitor
The ps2epsi extension shell script (ps2epsi.sh) in Inkscape before 0.41 allows local users to overwrite arbitrary files via a symlink attack
LowCVSS 2.1No exploitEPSS 0%
inkscape · inkscapeNov 29, 2005