CVE-2022-0496: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerbiility was found in Openscad, where a DXF-format drawing with particular not necessarily malformed! properties may cause an out-of-bounds memory access when imported using import...

PT-2022-37150

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow WRITE crash. Technical details about the crash include the function names dynapi set helper, dwg dynapi enti...

libredwg:llvmfuzz: Heap-buffer-overflow in dynapi_set_helper

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=6273056472956928 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

Remote Code Execution (RCE)

librecad is vulnerable to remote code execution. The vulnerability exists due to a heap buffer overflow in DLDxf::handleLWPolylineData functionality of Ribbonsoft dxflib allowing an attacker to inject maliciously crafted script into the system via a specially-crafted .dxf file...

OPENSUSE-SU-2022:0155-1 Security update for libredwg

This update for libredwg fixes the following issues: Update to release 0.12.5 boo1193372 CVE-2021-28237 Restricted accepted DXF objects to all stable and unstable classes, minus MATERIAL, ARCDIMENSION, SUN, PROXY. I.e. most unstable objects do not allow unknown DXF codes anymore. This fixed most...

Security update for libredwg (moderate)

SUSE Security Update: Security update for libredwg Announcement ID: openSUSE-SU-2022:0149-1 Rating: moderate References: 1193372 1194767 Cross-References: CVE-2021-28237 CVE-2022-21658 CVSS scores: CVE-2022-21658 NVD : 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H CVE-2022-21658 SUSE: 6.2...

[SECURITY] Fedora 36 Update: libdxflib-3.26.4-2.fc36

dxflib is a C++ library for reading and writing DXF files...

Mageia: Security Advisory (MGASA-2022-0148)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated libdxfrw packages fix security vulnerability

A code execution vulnerability exists in the dwgCompressor::decompress18 functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability. CVE-2021-21898 A code...

MGASA-2022-0148 Updated openscad packages fix security vulnerability

Out-of-bounds memory access in DXF loader. CVE-2022-0496 Out-of-bounds memory access in comment parser. CVE-2022-0497...

Updated openscad packages fix security vulnerability

Out-of-bounds memory access in DXF loader. CVE-2022-0496 Out-of-bounds memory access in comment parser. CVE-2022-0497...

PT-2022-13214

Name of the Vulnerable Software and Affected Versions Openscad affected versions not specified Description A vulnerability was found in Openscad, where a DXF-format drawing with particular properties may cause an out-of-bounds memory access when imported using the import function. Recommendations...

Bentley MicroStation CONNECT DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Bentley View DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF...

CVE-2022-25792

A maliciously crafted DXF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to write beyond the allocated buffer through Buffer overflow vulnerability. This vulnerability can be exploited to execute arbitrary code...

CVE-2022-25792

A maliciously crafted DXF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to write beyond the allocated buffer through Buffer overflow vulnerability. This vulnerability can be exploited to execute arbitrary code...

CVE-2022-25792: Out-of-bounds Write

A maliciously crafted DXF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to write beyond the allocated buffer through Buffer overflow vulnerability. This vulnerability can be exploited to execute arbitrary code...

Dxflib Function HandleLWPolylineData Confidential Data Compromise

The vulnerability of the function DLDxf::handleLWPolylineData in the DXF file parsing library Dxflib is related to writing outside the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures usin...

Out-of-Bounds Access

openscad is vulnerable to out-of-bounds access. The vulnerability exists in ADDLINE function in dxfdata.cc due to missing validations in DXF import which allows an attacker to cause an out of bound writes...

CVE-2021-46627

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...