libredwg 资源管理错误漏洞

GNU LibreDWG is a C language library from the GNU community for working with DWG files. GNU LibreDWG is vulnerable to a resource management error, and no details of the vulnerability are currently available...

libredwg 缓冲区错误漏洞

GNU LibreDWG is a C language library from the GNU community for working with DWG files. GNU LibreDWG is vulnerable to a stack overflow vulnerability, for which no detailed vulnerability details are currently available...

CVE-2022-33034

CVE-2022-33034 affects LibreDWG v0.12.4.4608, with a stack overflow vulnerability in the function copy_bytes in decode_r2007.c. The connected sources consistently describe a stack overflow condition in the GNU LibreDWG library for DWG file processing; no detailed exploitation vectors or CVSS-base...

CVE-2022-33034

LibreDWG v0.12.4.4608 was discovered to contain a stack overflow via the function copybytes at decoder2007.c...

CVE-2022-33033

CVE-2022-33033 affects LibreDWG (GNU LibreDWG) v0.12.4.4608. The vulnerability is a double-free in dwg_read_file() within dwg.c. According to the CVSS data, it has a high impact on confidentiality, integrity, and availability, with a local exposure that requires user interaction; exploitation det...

CVE-2022-33033

LibreDWG v0.12.4.4608 was discovered to contain a double-free via the function dwgreadfile at dwg.c...

CVE-2022-33032

LibreDWG v0.12.4.4608 was discovered to contain a heap-buffer-overflow via the function decodepreR13sectionhdr at decoder11.c...

CVE-2022-33032

Affected software: LibreDWG v0.12.4.4608. Root cause: heap-buffer-overflow in the function decode_preR13_section_hdr located in decode_r11.c. Impact: memory corruption with potential execution of arbitrary code (as described by PT-2022-21657). Status / remediation: no patch/version fix informatio...

CVE-2022-33025

CVE-2022-33025 affects LibreDWG, specifically v0.12.4.4608, with a heap-use-after-free in decode_preR13_section (decode_r11.c). The issue is addressed in LibreDWG v0.12.5.5907, per the openSUSE/SU (openSUSE-SU-2023:0201-1) advisory and the OSV entry for OPENSUSE-SU-2023:0201-1, which list CVE-202...

CVE-2022-33025

LibreDWG v0.12.4.4608 was discovered to contain a heap-use-after-free via the function decodepreR13section at decoder11.c...

CVE-2022-33028

CVE-2022-33028 affects LibreDWG (v0.12.4.4608). A heap buffer overflow is triggered by the function dwg_add_object in decode.c. The vulnerability is documented across multiple sources (NVD, Red Hat, SUSE, CNVD, etc.) with impact described as partial to high on confidentiality, integrity, and avai...

CVE-2022-33028

LibreDWG v0.12.4.4608 was discovered to contain a heap buffer overflow via the function dwgaddobject at decode.c...

CVE-2022-33027

LibreDWG v0.12.4.4608 contains a heap-use-after-free vulnerability triggered by the function dwg_add_handleref in dwg.c. Multiple sources (including Red Hat, SUSE, PRION/PT-Security entries) corroborate this issue without publicly available patch details in the provided documents. Exploitation st...

CVE-2022-33027

LibreDWG v0.12.4.4608 was discovered to contain a heap-use-after-free via the function dwgaddhandleref at dwg.c...

CVE-2022-33026

LibreDWG v0.12.4.4608 was discovered to contain a heap buffer overflow via the function bitcalcCRC at bits.c...

CVE-2022-33026

CVE-2022-33026 affects LibreDWG v0.12.4.4608, where the heap buffer overflow is triggered in the bit_calc_CRC function in bits.c. The vulnerability is documented across multiple sources (LibreDWG-related CVE coverage, Red Hat SUSE/CNVD entries) with CVSS indicating a high-impact scenario (confide...

CVE-2022-33024

There is an Assertion int decodepreR13entitiesBITCODERL, BITCODERL, unsigned int, BITCODERL, BITCODERL, BitChain , DwgData ' failed at dwg2dxf: decode.c:5801 in libredwg v0.12.4.4608...

CVE-2022-33024

The CVE-2022-33024 entry involves the GNU LibreDWG library (libredwg). A denial-of-service condition exists due to an assertion failure in the decode_preR13_entities path within dwg2dxf (decode.c:5801) in libredwg v0.12.4.4608. A remote attacker could trigger the assertion, potentially exhausting...

PT-2022-21654 · Libredwg · Libredwg

Name of the Vulnerable Software and Affected Versions: LibreDWG version 0.12.4.4608 Description: A heap buffer overflow issue was discovered in the bit calc CRC function at bits.c, which can be exploited. Recommendations: For LibreDWG version 0.12.4.4608, consider disabling the bit calc CRC...

PT-2022-21655 · Libredwg · Libredwg

Name of the Vulnerable Software and Affected Versions: LibreDWG version 0.12.4.4608 Description: A heap-use-after-free issue was discovered in LibreDWG, which occurs via the dwg add handleref function at dwg.c. Recommendations: For LibreDWG version 0.12.4.4608, consider restricting access to the...