SUSE CVE-2021-39527

An issue was discovered in libredwg through v0.10.1.3751. appinfoprivate in decode.c has a heap-based buffer overflow...

CVE-2021-39527

CVE-2021-39527 describes a heap-based buffer overflow in LibreDWG/libredwg (up to v0.10.1.3751). The root cause is in decode.c, function appinfo_private() . Reported impact per records: CVSSv3.1 base score 8.8 (HIGH) with network attack, no authentication, UI required, and impact on confidentiali...