PT-2024-41104 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: Libdwg affected versions not specified Description: The software contains an index-out-of-bounds issue discovered by OSS-Fuzz. The crash occurs within the dwg decode eed, dwg decode entity, and dwg decode RAY private functions. Recommendation...

SUSE CVE-2018-14524

dwgdecodeeed in decode.c in GNU LibreDWG before 0.6 leads to a double free in dwgfreeeed in free.c because it does not properly manage the obj-eed value after a free occurs...

PT-2019-19864

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions 0.7 through 0.7.1645 Description A heap-based buffer overflow issue exists in the dwg decode eed data function at decode.c for the z dimension. Recommendations For GNU LibreDWG versions 0.7 through 0.7.1645, consider...

PT-2019-19861

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions 0.7 through 0.7.1645 Description A heap-based buffer overflow issue exists in the function dwg decode eed data at decode.c, specifically affecting the y dimension. Recommendations For GNU LibreDWG versions 0.7 through...