CVE-2022-28809

An issue was discovered in Open Design Alliance Drawings SDK before 2023.3. An Out-of-Bounds Read vulnerability exists when reading a DWG file with an invalid vertex number in a recovery mode. An attacker can leverage this vulnerability to execute code in the context of the current process...

CVE-2022-28808

An issue was discovered in Open Design Alliance Drawings SDK before 2023.3. An Out-of-Bounds Read vulnerability exists when reading DWG files in a recovery mode. An attacker can leverage this vulnerability to execute code in the context of the current process...

CVE-2022-28808

Open Design Alliance Drawings SDK (Open Design Alliance) contains CVE-2022-28808, an out-of-bounds read when reading DWG files in recovery mode in all versions prior to 2023.3. The issue can allow code execution in the current process when processing DWG data in recovery mode. Affected component:...

CVE-2022-28807

An issue was discovered in Open Design Alliance Drawings SDK before 2023.2. An Out-of-Bounds Read vulnerability exists when rendering a .dwg file after it's opened in the recovery mode. An attacker can leverage this vulnerability to execute code in the context of the current process...

GNU LibreDWG Resource Management Error Vulnerability (CNVD-2022-5225)

GNU LibreDWG is a C language library from the GNU community for working with DWG files. GNU LibreDWG is vulnerable to a resource management error, and no details of the vulnerability are currently available...

GNU LibreDWG Resource Management Error Vulnerability (CNVD-2022-52256)

GNU LibreDWG is a C language library from the GNU community for working with DWG files. GNU LibreDWG is vulnerable to a resource management error, and no details of the vulnerability are currently available...

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2022-52252)

GNU LibreDWG is a C language library from the GNU community for working with DWG files. GNU LibreDWG suffers from a heap buffer overflow vulnerability, for which no detailed vulnerability details are currently available...

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2022-52257)

GNU LibreDWG is a C language library from the GNU community for working with DWG files. GNU LibreDWG suffers from a heap buffer overflow vulnerability, for which no detailed vulnerability details are currently available...

GNU LibreDWG Stack Overflow Vulnerability

GNU LibreDWG is a C language library from the GNU community for working with DWG files. GNU LibreDWG is vulnerable to a stack overflow vulnerability, for which no detailed vulnerability details are currently available...

GNU LibreDWG Double Release Vulnerability (CNVD-2022-52258)

GNU LibreDWG is a C language library from the GNU community for working with DWG files. GNU LibreDWG suffers from a double-release vulnerability, for which no detailed vulnerability details are currently available...

CVE-2022-33028

LibreDWG v0.12.4.4608 was discovered to contain a heap buffer overflow via the function dwgaddobject at decode.c...

libredwg 资源管理错误漏洞

GNU LibreDWG is a C language library from the GNU community for working with DWG files. GNU LibreDWG is vulnerable to a resource management error, and no details of the vulnerability are currently available...

libredwg 缓冲区错误漏洞

GNU LibreDWG is a C language library from the GNU community for working with DWG files. GNU LibreDWG suffers from a heap buffer overflow vulnerability, for which no detailed vulnerability details are currently available...

PT-2022-21655 · Libredwg · Libredwg

Name of the Vulnerable Software and Affected Versions: LibreDWG version 0.12.4.4608 Description: A heap-use-after-free issue was discovered in LibreDWG, which occurs via the dwg add handleref function at dwg.c. Recommendations: For LibreDWG version 0.12.4.4608, consider restricting access to the...

Malicious code in dwg-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f73239d668960c74eb15b52c01e2e5f683feffd03cdbe08aa2dcc2795574515b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2627 Malicious code in dwg-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f73239d668960c74eb15b52c01e2e5f683feffd03cdbe08aa2dcc2795574515b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security update for librecad (important)

openSUSE Security Update: Security update for librecad Announcement ID: openSUSE-SU-2022:10002-1 Rating: important References: 1195105 1195122 1197664 Cross-References: CVE-2021-45341 CVE-2021-45342 CVSS scores: CVE-2021-45341 NVD : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-45342...

PT-2022-21165 · Sap +1 · Sap 3D Visual Enterprise Viewer +1

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Viewer affected versions not specified Description: The issue occurs when a user opens manipulated AutoCAD .dwg files received from untrusted sources in SAP 3D Visual Enterprise Viewer, causing the application to cras...

OPENSUSE-SU-2022:10002-1 Security update for librecad

This update for librecad fixes the following issues: - CVE-2021-45341: Fixed a buffer overflow vulnerability in LibreCAD allows an attacker to achieve remote code execution via a crafted JWW document boo1195105 - CVE-2021-45342: Fixed a buffer overflow vulnerability in jwwlib in LibreCAD allows a...

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2022-52261)

GNU LibreDWG is a C library for processing DWG files from the GNU community.A heap buffer overflow vulnerability exists in versions of GNU LibreDWG prior to 0.12.4, which stems from a boundary error in copycompressedbytes of decoder2007.c when handling untrusted input. No detailed vulnerability...