CVE-2018-14524

2018-07-2308:29:00

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.6%

JSON

dwg_decode_eed in decode.c in GNU LibreDWG before 0.6 leads to a double free (in dwg_free_eed in free.c) because it does not properly manage the obj->eed value after a free occurs.

CPENameOperatorVersion
libredwgeq0.4.793
libredwgeq0.4.651
libredwgeq0.5
libredwgeq0.5.1093
libredwgeq0.5.965
libredwgeq0.4.804
libredwgeq0.5.1020
libredwgeq0.4.535
libredwgeq0.4.828
libredwgeq0.4.931

Name	Operator	Version
libredwg	eq	0.4.793
libredwg	eq	0.4.651
libredwg	eq	0.5
libredwg	eq	0.5.1093
libredwg	eq	0.5.965
libredwg	eq	0.4.804
libredwg	eq	0.5.1020
libredwg	eq	0.4.535
libredwg	eq	0.4.828
libredwg	eq	0.4.931