CVE-2021-27041

CVE-2021-27041 affects Autodesk AutoCAD DWG file parsing. The flaw is an out-of-bounds write resulting from insufficient validation while parsing DWG data, allowing arbitrary code execution. Exploitation vectors involve opening a malicious DWG file (user interaction may be required per sources). ...

CVE-2021-27041

A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. This vulnerability can be exploited to execute arbitrary code...

CVE-2021-27040

CVE-2021-27040 is an out-of-bounds read in the DWG file parsing path that affects ICONICS GENESIS64 (and related components) when importing DWG data. Root cause described across sources as improper validation of user-supplied data leading to reading past allocated buffers, enabling potential arbi...

CVE-2021-27040

A maliciously crafted DWG file can be forced to read beyond allocated boundaries when parsing the DWG file. This vulnerability can be exploited to execute arbitrary code...

CVE-2021-32940

An out-of-bounds read issue exists in the DWG file-recovering procedure in the Drawings SDK All versions prior to 2022.5 resulting from the lack of proper validation of user-supplied data. This can result in a read past the end of an allocated buffer and allow attackers to cause a denial-of-servi...

CVE-2021-32948

An out-of-bounds write issue exists in the DWG file-reading procedure in the Drawings SDK All versions prior to 2022.4 resulting from the lack of proper validation of user-supplied data. This can result in a write past the end of an allocated buffer and allow attackers to cause a denial-of-servic...

Design/Logic Flaw

An out-of-bounds write issue exists in the DWG file-reading procedure in the Drawings SDK All versions prior to 2022.4 resulting from the lack of proper validation of user-supplied data. This can result in a write past the end of an allocated buffer and allow attackers to cause a denial-of-servic...

CVE-2021-31501

OpenText Brava! Desktop 16.6.3.84 is affected by a DWG file parsing vulnerability caused by missing validation, leading to an out-of-bounds read that can disclose sensitive data. It requires user interaction (malicious page/file); in combination with other vulnerabilities, it could enable arbitra...

OpenText Brava! Buffer Overflow Vulnerability

Opentext OpenText Brava! is a browser-based universal document viewer from OpenText Opentext Canada. The product supports viewing, annotating and editing many types of documents. A buffer overflow vulnerability exists in versions of Brava! Desktop prior to 6.6.4.114, which stems from a lack of...

OpenText Brava! Desktop post-release reuse vulnerability (CNVD-2021-42338)

OpenText Brava! Desktop is a Windows-based viewing and collaboration tool that lets you easily view and collaborate on almost any file. A post-release reuse vulnerability exists in the parsing of DWG files in OpenText Brava! Desktop. The vulnerability stems from a failure to validate the existenc...

OpenText Brava! Desktop DWG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2020-23861

A heap-based buffer overflow vulnerability exists in LibreDWG 0.10.1 via the readsystempage function at libredwg-0.10.1/src/decoder2007.c:666:5, which causes a denial of service by submitting a dwg file...

CVE-2020-23861

A heap-based buffer overflow vulnerability exists in LibreDWG 0.10.1 via the readsystempage function at libredwg-0.10.1/src/decoder2007.c:666:5, which causes a denial of service by submitting a dwg file...

CVE-2020-23861

A heap-based buffer overflow vulnerability exists in LibreDWG 0.10.1 via the readsystempage function at libredwg-0.10.1/src/decoder2007.c:666:5, which causes a denial of service by submitting a dwg file...

Siemens JT2Go DWG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of DW...

Adobe Illustrator DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Illustrator. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of D...

CVE-2019-17143

CVE-2019-17143 affects Foxit PhantomPDF 9.6.0.25114. The root cause is a flaw in DWG file parsing where the code does not verify an object’s existence before operations, enabling information disclosure. Some sources note this could be combined with other vulnerabilities to achieve code execution ...

Adobe Acrobat Pro DC DWG File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Adobe Acrobat Pro DC DWG File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

XnView dwg File Memory Corruption Vulnerability

XnView is an image viewer. A memory corruption vulnerability exists in XnView's handling of dwg files, where an attacker can trick a user who has installed XnView into opening a malicious dwg file, which in turn triggers a vulnerability that could result in the execution of malicious code on the...