libredwg Security Vulnerabilities

libredwg is a free implementation of the DWG file format. A security vulnerability exists in libredwg versions prior to 0.12.5.6384, which stems from an out-of-bounds read problem in section-numpages in decoder2007.c. The vulnerability is caused by a read-over-bounds problem in section-numpages...

PT-2022-21659

Name of the Vulnerable Software and Affected Versions LibreDWG version 0.12.4.4608 Description A stack overflow issue was discovered in the function copy bytes at decode r2007.c, which can be exploited. Recommendations For LibreDWG version 0.12.4.4608, consider disabling the copy bytes function i...

PT-2022-11627

Name of the Vulnerable Software and Affected Versions dwgread versions prior to 0.12.4 Description A heap buffer overflow was discovered in the copy bytes function in decode r2007.c via a crafted dwg file. Recommendations For versions prior to 0.12.4, update to version 0.12.4 or later to resolve...

PT-2022-11626

Name of the Vulnerable Software and Affected Versions dwgread versions prior to 0.12.4 Description A heap buffer overflow was discovered in the copy compressed bytes function in decode r2007.c via a crafted dwg file. Recommendations For versions prior to 0.12.4, update to version 0.12.4 or later ...

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2020-04068)

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in copycompressedbytes in decoder2007.c in LibreDWG 0.9.3.2564. An attacker can exploit this vulnerability to cause a buffer overflow or heap overflow, among other things...

Heap overflow

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in readpagesmap in decoder2007.c...

PT-2020-19179 · Gnu +1 · Gnu Libredwg +1

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.9.3.2564 Description: The issue is related to a heap-based buffer over-read in the copy compressed bytes function located in decode r2007.c. Recommendations: For GNU LibreDWG version 0.9.3.2564, consider updating to a...

PT-2020-19176

Name of the Vulnerable Software and Affected Versions GNU LibreDWG version 0.9.3.2564 Description The issue is related to a heap-based buffer over-read in the read pages map function located in decode r2007.c. Recommendations For GNU LibreDWG version 0.9.3.2564, consider updating to a newer versi...