956 matches found
PT-2022-21657 · Libredwg · Libredwg
Name of the Vulnerable Software and Affected Versions: LibreDWG version 0.12.4.4608 Description: The issue is related to a heap-buffer-overflow in the decode preR13 section hdr function located at decode r11.c. This overflow can potentially lead to memory corruption and execution of arbitrary cod...
Security update for libredwg (moderate)
openSUSE Security Update: Security update for libredwg Announcement ID: openSUSE-SU-2022:0155-1 Rating: moderate References: 1193372 Cross-References: CVE-2021-28237 Affected Products: openSUSE Backports SLE-15-SP4 An update that fixes one vulnerability is now available. Description: This update...
OPENSUSE-SU-2022:0155-1 Security update for libredwg
This update for libredwg fixes the following issues: Update to release 0.12.5 boo1193372 CVE-2021-28237 Restricted accepted DXF objects to all stable and unstable classes, minus MATERIAL, ARCDIMENSION, SUN, PROXY. I.e. most unstable objects do not allow unknown DXF codes anymore. This fixed most...
Security update for libredwg (moderate)
SUSE Security Update: Security update for libredwg Announcement ID: openSUSE-SU-2022:0149-1 Rating: moderate References: 1193372 1194767 Cross-References: CVE-2021-28237 CVE-2022-21658 CVSS scores: CVE-2022-21658 NVD : 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H CVE-2022-21658 SUSE: 6.2...
GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2022-52261)
GNU LibreDWG is a C library for processing DWG files from the GNU community.A heap buffer overflow vulnerability exists in versions of GNU LibreDWG prior to 0.12.4, which stems from a boundary error in copycompressedbytes of decoder2007.c when handling untrusted input. No detailed vulnerability...
GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2022-52260)
GNU LibreDWG is a C library for processing DWG files from the GNU community.A heap buffer overflow vulnerability exists in versions of GNU LibreDWG prior to 0.12.4, which stems from a boundary error in copybytes of decoder2007.c when handling untrusted input. No detailed vulnerability details are...
GNU LibreDWG 缓冲区错误漏洞
GNU LibreDWG is a C library for processing DWG files from the GNU community.A heap buffer overflow vulnerability exists in versions of GNU LibreDWG prior to 0.12.4, which stems from a boundary error in copybytes of decoder2007.c when handling untrusted input. No detailed vulnerability details are...
GNU LibreDWG 缓冲区错误漏洞
GNU LibreDWG is a C library for processing DWG files from the GNU community.A heap buffer overflow vulnerability exists in versions of GNU LibreDWG prior to 0.12.4, which stems from a boundary error in copycompressedbytes of decoder2007.c when handling untrusted input. No detailed vulnerability...
GNU LibreDWG Buffer Overflow Vulnerability (CNVD-2022-52262)
GNU LibreDWG is a C library for processing DWG files from the GNU community. GNU LibreDWG 0.12.4.4313 to 0.12.4.4367 is vulnerable due to an out-of-domain write in the dwg free BLOCK private from dwg free BLOCK and dwg free object. No detailed vulnerability details are available at this time...
CVE-2021-45950
LibreDWG 0.12.4.4313 through 0.12.4.4367 has an out-of-bounds write in dwgfreeBLOCKprivate called from dwgfreeBLOCK and dwgfreeobject...
CVE-2021-45950
LibreDWG 0.12.4.4313 through 0.12.4.4367 has an out-of-bounds write in dwgfreeBLOCKprivate called from dwgfreeBLOCK and dwgfreeobject...
CVE-2021-45950
LibreDWG 0.12.4.4313 through 0.12.4.4367 has an out-of-bounds write in dwgfreeBLOCKprivate called from dwgfreeBLOCK and dwgfreeobject...
Design/Logic Flaw
LibreDWG 0.12.4.4313 through 0.12.4.4367 has an out-of-bounds write in dwgfreeBLOCKprivate called from dwgfreeBLOCK and dwgfreeobject...
GNU LibreDWG 缓冲区错误漏洞
GNU LibreDWG is a C library for processing DWG files from the GNU community. GNU LibreDWG 0.12.4.4313 to 0.12.4.4367 is vulnerable due to an out-of-domain write in the dwg free BLOCK private from dwg free BLOCK and dwg free object. No detailed vulnerability details are available at this time...
CVE-2021-45950
CVE-2021-45950 affects LibreDWG 0.12.4.4313 to 0.12.4.4367. The issue is an out-of-bounds write in the function dwg_free_BLOCK_private, which is invoked from dwg_free_BLOCK and dwg_free_object. Multiple sources (Red Hat, SUSE, CNVD, NVD, OSV, CNVD CNVD-2022-52262) corroborate the same description...
CVE-2021-45950
LibreDWG 0.12.4.4313 through 0.12.4.4367 has an out-of-bounds write in dwgfreeBLOCKprivate called from dwgfreeBLOCK and dwgfreeobject...
LibreDWG Buffer Overflow Vulnerability (CNVD-2021-95252)
Libredwg is a free C library from the Free Software Foundation, USA. It is used to read and write Dwg files. LibreDWG suffers from a buffer overflow vulnerability, which stems from the inclusion of a heap buffer overflow in decodepreR13. No detailed vulnerability details are currently available...
LibreDWG Buffer Overflow Vulnerability
Libredwg is a free C library from the Free Software Foundation, USA. It is used to read and write Dwg files.A buffer overflow vulnerability exists in LibreDWG, which stems from the inclusion of a NULL pointer dereference in outdxfb.c in LibreDWG v0.12.3. No details of the vulnerability are...