CVE-2018-14471

2018-07-2016:29:00

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.0%

JSON

dwg_obj_block_control_get_block_headers in dwg_api.c in GNU LibreDWG 0.5.1048 allows remote attackers to cause a denial of service (NULL pointer dereference and SEGV) via a crafted dwg file.

CPENameOperatorVersion
libredwgeq0.4.793
libredwgeq0.4.651
libredwgeq0.5
libredwgeq0.5.1093
libredwgeq0.5.965
libredwgeq0.4.804
libredwgeq0.5.1020
libredwgeq0.4.535
libredwgeq0.4.828
libredwgeq0.4.931

Name	Operator	Version
libredwg	eq	0.4.793
libredwg	eq	0.4.651
libredwg	eq	0.5
libredwg	eq	0.5.1093
libredwg	eq	0.5.965
libredwg	eq	0.4.804
libredwg	eq	0.5.1020
libredwg	eq	0.4.535
libredwg	eq	0.4.828
libredwg	eq	0.4.931

Rows per page:

1-10 of 1421

References

github.com/LibreDWG/libredwg/issues/32