PT-2020-19176

Name of the Vulnerable Software and Affected Versions GNU LibreDWG version 0.9.3.2564 Description The issue is related to a heap-based buffer over-read in the read pages map function located in decode r2007.c. Recommendations For GNU LibreDWG version 0.9.3.2564, consider updating to a newer versi...

PT-2020-19179 · Gnu +1 · Gnu Libredwg +1

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.9.3.2564 Description: The issue is related to a heap-based buffer over-read in the copy compressed bytes function located in decode r2007.c. Recommendations: For GNU LibreDWG version 0.9.3.2564, consider updating to a...

PT-2020-19181 · Gnu +1 · Gnu Libredwg +1

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.9.3.2564 Description: The issue is related to a heap-based buffer over-read in the bfr read function located in decode.c. Recommendations: For GNU LibreDWG version 0.9.3.2564, consider updating to a newer version that...

ALPINE-CVE-2020-5312

libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow...

DEBIAN-CVE-2020-5312

libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow...

DEBIAN-CVE-2020-5311

libImaging/SgiRleDecode.c in Pillow before 6.2.2 has an SGI buffer overflow...

DEBIAN-CVE-2020-5310

libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc...

ALPINE-CVE-2020-5313

libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow...

PYSEC-2020-84

libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow...

UBUNTU-CVE-2020-5311

libImaging/SgiRleDecode.c in Pillow before 6.2.2 has an SGI buffer overflow...

PYSEC-2020-83

libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow...

Pillow FLI Buffer Overflow Vulnerability

Pillow is a Python based image processing library. A buffer overflow vulnerability exists in the libImaging/FliDecode.c file in Pillow versions prior to 6.2.2. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries,...

PT-2019-6370

Name of the Vulnerable Software and Affected Versions ezXML versions 0.8.3 through 0.8.6 Description The issue is related to the ezxml decode function in the ezXML library, which performs incorrect memory handling while parsing a crafted XML file. This leads to a NULL pointer dereference when...

PT-2019-6371

Name of the Vulnerable Software and Affected Versions ezXML versions 0.8.3 through 0.8.6 Description The issue is related to the ezxml decode function in the ezXML library, which performs incorrect memory handling while parsing crafted XML files. This leads to a heap-based buffer over-read in the...

Design/Logic Flaw

An issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted excessive memory allocation in decode3dsolid in dwg.spec...

PT-2019-16047

Name of the Vulnerable Software and Affected Versions GNU LibreDWG version 0.92 Description An issue in GNU LibreDWG allows crafted input to cause an attempted excessive memory allocation in the dwg decode HATCH private function within dwg.spec. Recommendations For GNU LibreDWG version 0.92,...

PT-2019-16046

Name of the Vulnerable Software and Affected Versions GNU LibreDWG version 0.92 Description A heap-based buffer over-read issue was discovered in the decode R13 R2000 function in decode.c. Recommendations For GNU LibreDWG version 0.92, at the moment, there is no information about a newer version...

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2020-03560)

GNU LibreDWG is a GNU Project C library for working with DWG files. A buffer overflow vulnerability exists in the 'decodeR13R2000' function of the decode.c file in GNU LibreDWG version 0.92. The vulnerability stems from a networked system or product performing operations in memory without properl...

GNU LibreDWG Post-Release Reuse Vulnerability

GNU LibreDWG is a GNU Project C library for working with DWG files. A post-release reuse vulnerability exists in the 'resolveobjectrefvector' function in the decode.c file in GNU LibreDWG version 0.92. The vulnerability stems from mismanagement of system resources e.g., memory, disk space, files,...

PT-2019-16050

Name of the Vulnerable Software and Affected Versions GNU LibreDWG version 0.92 Description An issue was discovered where crafted input leads to an attempted excessive memory allocation in the dwg decode LWPOLYLINE private function within dwg.spec. Recommendations For GNU LibreDWG version 0.92, a...