PT-2025-10602 · Canvg · Canvg

Ducky97 · Published 2025-01-26 · Updated 2025-03-15 · CVE-2025-25977

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions canvg version 4.0.2

Description An issue in the Constructor of the class StyleElement allows an attacker to execute arbitrary code.

Recommendations For canvg version 4.0.2, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Prototype Pollution

Weakness Enumeration

CWE-1321

Related Identifiers

BDU:2025-09392

CVE-2025-25977

GHSA-V2MW-5MCH-W8C5

Affected Products

Canvg

References · 16

• 🔥 https://github.com/canvg/canvg/issues/1749 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-25977 · Security Note
• https://osv.dev/vulnerability/CVE-2025-25977 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-v2mw-5mch-w8c5 · Vendor Advisory
• https://wiki.astralinux.ru/x/ziLoD · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-09392 · Security Note
• https://github.com/canvg/canvg/pull/1750 · Note
• https://github.com/canvg/canvg · Note
• https://github.com/canvg/canvg/commit/c3743e6345f3e01aefdcdd412c3f26494f4b5d7d · Note
• https://github.com/canvg/canvg/blob/937668eced93e0335c67a255d0d2277ea708b2cb/src/Document/StyleElement.ts · Note
• https://t.me/cvedetector/19965 · Telegram Post
• https://twitter.com/cracbot/status/1900864652260897239 · Twitter Post
• https://twitter.com/CVEnew/status/1899132436866294233 · Twitter Post
• https://canvg.js.org · Note
• https://t.me/cvetracker/18821 · Telegram Post