A use‑after‑free fault arises when librsvg processes an SVG document that contains nested XML inclusions (Xincludes) with duplicate entity declarations. The library mistakenly frees an XML entity that remains in use by the parser, which can lead to a program crash or the execution of arbitrary code if the attacker supplies a crafted SVG file.

The flaw is present in Red Hat Enterprise Linux releases 6 through 10, where the bundled librsvg library is used by graphical and document‑rendering components. All supported versions that ship the affected librsvg package are impacted.

The vulnerability has a CVSS score of 7.8, indicating high severity. The EPSS score is not available and it is not listed in CISA's KEV catalog, so exploitation has not been documented in the wild. Based on the description, it is inferred that an attacker would need to supply or manipulate a trusted application that loads an SVG file via librsvg, indicating a local or service‑level attack surface. The lack of a public exploit does not negate the risk, but it indicates that the likelihood of widespread exploitation remains uncertain.