Lucene search
+L

957 matches found

Cvelist
Cvelist
added 2026/05/25 8:45 p.m.86 views

CVE-2026-9502 GNU LibreDWG Dwgread Utility decode.c decompress_R2004_section heap-based overflow

A vulnerability was identified in GNU LibreDWG up to 0.14. This affects the function decompressR2004section of the file src/decode.c of the component Dwgread Utility. The manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit is publicly available an...

5.3CVSS0.00154EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2026/05/25 8:30 p.m.91 views

CVE-2026-9501 GNU LibreDWG Dwgread Utility decode.c decompress_R2004_section assertion

A vulnerability was determined in GNU LibreDWG up to 0.14. The impacted element is the function decompressR2004section of the file src/decode.c of the component Dwgread Utility. Executing a manipulation can lead to reachable assertion. The attack is restricted to local execution. The exploit has...

4.8CVSS5.3AI score0.00144EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/05/25 8:30 p.m.30 views

EUVD-2026-31737

A vulnerability was determined in GNU LibreDWG up to 0.14. The impacted element is the function decompressR2004section of the file src/decode.c of the component Dwgread Utility. Executing a manipulation can lead to reachable assertion. The attack is restricted to local execution. The exploit has...

4.8CVSS5.3AI score0.00144EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2026/05/25 8:30 p.m.18 views

CVE-2026-9501

A vulnerability was determined in GNU LibreDWG up to 0.14. The impacted element is the function decompressR2004section of the file src/decode.c of the component Dwgread Utility. Executing a manipulation can lead to reachable assertion. The attack is restricted to local execution. The exploit has...

4.8CVSS5.3AI score0.00144EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2026/05/25 8:30 p.m.10 views

CVE-2026-9501 GNU LibreDWG Dwgread Utility decode.c decompress_R2004_section assertion

A vulnerability was determined in GNU LibreDWG up to 0.14. The impacted element is the function decompressR2004section of the file src/decode.c of the component Dwgread Utility. Executing a manipulation can lead to reachable assertion. The attack is restricted to local execution. The exploit has...

4.8CVSS5.7AI score
SaveExploits0References9
EUVD
EUVD
added 2026/05/25 8:15 p.m.23 views

EUVD-2026-31732

A vulnerability was found in GNU LibreDWG up to 0.14. The affected element is the function read2004compressedsection of the file src/decode.c of the component Dwgread Utility. Performing a manipulation results in heap-based buffer overflow. The attack is only possible with local access. The explo...

5.3CVSS6AI score0.00124EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2026/05/25 8:15 p.m.13 views

CVE-2026-9500 GNU LibreDWG Dwgread Utility decode.c read_2004_compressed_section heap-based overflow

A vulnerability was found in GNU LibreDWG up to 0.14. The affected element is the function read2004compressedsection of the file src/decode.c of the component Dwgread Utility. Performing a manipulation results in heap-based buffer overflow. The attack is only possible with local access. The explo...

5.3CVSS6AI score0.00124EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/05/25 8:15 p.m.69 views

CVE-2026-9500 GNU LibreDWG Dwgread Utility decode.c read_2004_compressed_section heap-based overflow

A vulnerability was found in GNU LibreDWG up to 0.14. The affected element is the function read2004compressedsection of the file src/decode.c of the component Dwgread Utility. Performing a manipulation results in heap-based buffer overflow. The attack is only possible with local access. The explo...

5.3CVSS0.00124EPSS
SaveExploits0References6
OSV
OSV
added 2026/05/25 8:15 p.m.9 views

CVE-2026-9500 GNU LibreDWG Dwgread Utility decode.c read_2004_compressed_section heap-based overflow

A vulnerability was found in GNU LibreDWG up to 0.14. The affected element is the function read2004compressedsection of the file src/decode.c of the component Dwgread Utility. Performing a manipulation results in heap-based buffer overflow. The attack is only possible with local access. The explo...

4.8CVSS6.1AI score
SaveExploits0References8
ATTACKERKB
ATTACKERKB
added 2026/05/25 8:15 p.m.22 views

CVE-2026-9500

A vulnerability was found in GNU LibreDWG up to 0.14. The affected element is the function read2004compressedsection of the file src/decode.c of the component Dwgread Utility. Performing a manipulation results in heap-based buffer overflow. The attack is only possible with local access. The explo...

5.3CVSS6AI score0.00124EPSS
SaveExploits0References6Affected Software1
CNNVD
CNNVD
added 2026/05/25 12:00 a.m.18 views

GNU LibreDWG 代码问题漏洞

GNU LibreDWG is a C language library for working with DWG files from the US GNU community. A code issue vulnerability exists in GNU LibreDWG version 0.14 and earlier versions, which stems from a null pointer dereference in the dwgnextentity function of the src/decode.c file in the DWG File Handle...

4.8CVSS6.2AI score0.00113EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/05/25 12:00 a.m.24 views

PT-2026-43125

A vulnerability was found in GNU LibreDWG up to 0.14. The affected element is the function read 2004 compressed section of the file src/decode.c of the component Dwgread Utility. Performing a manipulation results in heap-based buffer overflow. The attack is only possible with local access. The...

5.3CVSS6AI score0.00124EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/05/25 12:00 a.m.15 views

GNU LibreDWG 缓冲区错误漏洞

GNU LibreDWG is a C language library for working with DWG files from the US GNU community. A buffer error vulnerability exists in GNU LibreDWG version 0.14 and earlier versions, which stems from an out-of-bounds read in the bitconvertTU function of the programs/dwggrep.c file in the Dwggrep Utili...

4.8CVSS6.2AI score0.00176EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2026/05/25 12:00 a.m.22 views

GNU LibreDWG 安全漏洞

GNU LibreDWG is a C language library for working with DWG files from the US GNU community. A security vulnerability exists in GNU LibreDWG version 0.14 and earlier versions, which stems from a heap buffer overflow in the decompressR2004section function of the src/decode.c file in the Dwgread...

5.3CVSS6.2AI score0.00154EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2026/05/25 12:00 a.m.26 views

GNU LibreDWG 安全漏洞

GNU LibreDWG is a C language library for working with DWG files from the US GNU community. A security vulnerability exists in GNU LibreDWG version 0.14 and earlier versions, which stems from a heap buffer overflow in the read2004compressedsection function of the src/decode.c file in the Dwgread...

5.3CVSS6.2AI score0.00124EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/04/22 12:00 a.m.18 views

PT-2026-43431

Name of the Vulnerable Software and Affected Versions GNU libredwg versions prior to 0.13.4.8161 Description A heap-based buffer overflow occurs in the Dwgbmp Utility component within the bit read RC function of the bits.c file. This flaw allows a remote attacker to trigger the overflow through...

7.5CVSS7.3AI score0.00339EPSS
SaveExploits0References34
Positive Technologies
Positive Technologies
added 2026/04/22 12:00 a.m.20 views

PT-2026-43131

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions prior to 0.15 Description A security flaw in the DWG File Handler component occurs within the dwg next entity function of the src/decode.c file. The issue is caused by incorrect resource cleanup or release, leading to a...

4.8CVSS6.1AI score0.00113EPSS
SaveExploits0References33
Positive Technologies
Positive Technologies
added 2026/04/22 12:00 a.m.29 views

PT-2026-43126

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions prior to 0.15 Description The decompress R2004 section function within the src/decode.c file of the Dwgread Utility contains an uncontrolled reachable assertion. This issue allows a local attacker to cause a denial of...

4.8CVSS6.1AI score0.00144EPSS
SaveExploits0References31
Positive Technologies
Positive Technologies
added 2026/04/22 12:00 a.m.29 views

PT-2026-43136

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions prior to 0.15 Description A weakness in the Dwggrep Utility component allows an out-of-bounds read, which occurs when the system accesses memory outside the intended boundary of a buffer. This issue is located in the bit...

4.8CVSS6.1AI score0.00176EPSS
SaveExploits0References31
Positive Technologies
Positive Technologies
added 2026/04/22 12:00 a.m.31 views

PT-2026-43130

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions prior to 0.15 Description A heap-based buffer overflow exists in the Dwgread Utility component within the decompress R2004 section function of the src/decode.c file. This issue occurs during the processing of DWG format...

5.3CVSS6.5AI score0.00154EPSS
SaveExploits0References30
Rows per page
Query Builder