9 matches found
SUSE CVE-2021-21898
A code execution vulnerability exists in the dwgCompressor::decompress18 functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability...
LibreCad buffer overflow vulnerability
A buffer overflow vulnerability exists in LibreCAD, an open source CAD computer-aided design application from the LibreCAD organization, in LibreCad libdxfrw, which stems from the failure of the product's dwgCompressor::decompress18 function to properly handle special input data. An attacker coul...
DEBIAN-CVE-2021-21898
A code execution vulnerability exists in the dwgCompressor::decompress18 functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2021-21898
CVE-2021-21898 affects LibreCAD/libdxfrw (2.2.0-rc2-19-ge02f3580). The vulnerability lies in dwgCompressor::decompress18(), where a crafted DWG can trigger an out-of-bounds write, enabling possible code execution. Public references from Gentoo GLSA, Debian DSA/DLA and openSUSE/NASL advisories con...
LibreCAD 缓冲区错误漏洞
A buffer overflow vulnerability exists in LibreCAD, an open source CAD computer-aided design application from the LibreCAD organization, in LibreCad libdxfrw, which stems from the failure of the product's dwgCompressor::decompress18 function to properly handle special input data. An attacker coul...
PT-2021-5117 · Librecad +2 · Libdxfrw +2
Name of the Vulnerable Software and Affected Versions: LibreCad libdxfrw version 2.2.0-rc2-19-ge02f3580 Description: A code execution issue exists in the dwgCompressor::decompress18 functionality. This can be triggered by a specially-crafted .dwg file, leading to an out-of-bounds write. An attack...
Integer Overflow Vulnerability in libdxfrw 'dwgCompressor::decompress18' Function
libdxfrw is a C++ library for reading and writing DXF/DWG files. An integer overflow vulnerability exists in the 'dwgCompressor::decompress18' function in the dwgutil.cpp file in libdxfrw version 0.6.3. An attacker can exploit this vulnerability to cause an out-of-bounds read and crash the...
CVE-2018-14444
libdxfrw 0.6.3 has an Integer Overflow in dwgCompressor::decompress18 in dwgutil.cpp, leading to an out-of-bounds read and application crash...
CVE-2018-14444
The CVE affects libdxfrw 0.6.3, where an integer overflow in dwgCompressor::decompress18 (dwgutil.cpp) can trigger an out-of-bounds read and cause application crash. No exploitation details or remediation/version patch is provided in the connected documents; no specifics on affected products beyo...