956 matches found
CVE-2023-36273
CVE-2023-36273 affects LibreDWG in version 0.12.5, where a heap buffer overflow is triggered by the function bit_calc_CRC in bits.c. This is confirmed across multiple sources (NVD entry and OSS/openSUSE advisories) and is addressed by updating to LibreDWG v0.12.5.5907, which fixes the heap buffer...
libredwg 缓冲区错误漏洞
libredwg is a free implementation of the DWG file format. A buffer error vulnerability exists in libredwg version 0.12.5, which stems from the bitwriteTF function containing a heap buffer overflow vulnerability...
CVE-2023-36271
LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bitwcs2nlen at bits.c...
PT-2023-25508 · Libredwg · Libredwg
Name of the Vulnerable Software and Affected Versions: LibreDWG version 0.12.5 Description: A heap buffer overflow issue was discovered in LibreDWG via the bit write TF function at bits.c. Recommendations: For LibreDWG version 0.12.5, consider disabling the bit write TF function as a temporary...
CVE-2023-36271
LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bitwcs2nlen at bits.c...
CVE-2023-36274
LibreDWG v0.11 to v0.12.5 was discovered to contain a heap buffer overflow via the function bitwriteTF at bits.c...
PT-2023-35856 · Git +1 · Libredwg
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ crash has been reported, involving functions such as json write TF, dwg json LTYPE, and json objects write. Recommendations: ...
SUSE CVE-2023-25222
A heap-based buffer overflow vulnerability exits in GNU LibreDWG v0.12.5 via the bitreadRC function at bits.c...
CVE-2023-25222
A heap-based buffer overflow vulnerability exits in GNU LibreDWG v0.12.5 via the bitreadRC function at bits.c...
Heap overflow
A heap-based buffer overflow vulnerability exits in GNU LibreDWG v0.12.5 via the bitreadRC function at bits.c...
CVE-2023-25222
A heap-based buffer overflow vulnerability exits in GNU LibreDWG v0.12.5 via the bitreadRC function at bits.c...
CVE-2023-25222
A heap-based buffer overflow vulnerability exits in GNU LibreDWG v0.12.5 via the bitreadRC function at bits.c...
PT-2023-19993 · Gnu · Gnu Libredwg
Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.12.5 Description: A heap-based buffer overflow issue exists via the bit read RC function at bits.c. Recommendations: For GNU LibreDWG version 0.12.5, consider disabling the bit read RC function as a temporary workaround...
CVE-2023-25222
A heap-based buffer overflow vulnerability exits in GNU LibreDWG v0.12.5 via the bitreadRC function at bits.c...
CVE-2023-25222
The CVE-2023-25222 entry concerns GNU LibreDWG v0.12.5, where a heap-based buffer overflow is reported in the bit_read_RC function of bits.c. Several connected sources (Red Hat, SUSE, OSV, NVD, CVE List, CNNVD, etc.) corroborate a heap-based overflow in this exact component/version. Documented im...
GNU LibreDWG 缓冲区错误漏洞
GNU LibreDWG is a C language library for working with DWG files from the US GNU community. A security vulnerability exists in GNU LibreDWG version v0.12.5, which stems from a heap-based buffer overflow in the bitreadRC function in bits.c. The vulnerability is caused by a heap-based buffer overflo...
SUSE CVE-2018-14471
dwgobjblockcontrolgetblockheaders in dwgapi.c in GNU LibreDWG 0.5.1048 allows remote attackers to cause a denial of service NULL pointer dereference and SEGV via a crafted dwg file...
SUSE CVE-2018-14524
dwgdecodeeed in decode.c in GNU LibreDWG before 0.6 leads to a double free in dwgfreeeed in free.c because it does not properly manage the obj-eed value after a free occurs...