Lucene search
+L

18 matches found

osv_ubuntu
osv_ubuntu
•added 2026/11/12 12:00 a.m.•7 views

UBUNTU-CVE-2026-126497

LibreCAD through 2.2.1.6 contains a heap-based out-of-bounds write vulnerability in the bundled libdxfrw dwgReader18::parseDataPage function due to unchecked buffer size and page offsets. Attackers can craft an AC1018 R2004 DWG file with malicious startOffset values that cause decompress18 to wri...

8.5CVSS6.8AI score0.00171EPSS
SaveExploits0References7
osv_debian
osv_debian
•added 2026/11/11 1:17 a.m.•15 views

DEBIAN-CVE-2026-126497

LibreCAD through 2.2.1.6 contains a heap-based out-of-bounds write vulnerability in the bundled libdxfrw dwgReader18::parseDataPage function due to unchecked buffer size and page offsets. Attackers can craft an AC1018 R2004 DWG file with malicious startOffset values that cause decompress18 to wri...

8.5CVSS6.8AI score0.00171EPSS
SaveExploits0References1
Mend
Mend
•added 2026/11/11 12:58 a.m.•6 views

CVE-2026-126497

LibreCAD through 2.2.1.6 contains a heap-based out-of-bounds write vulnerability in the bundled libdxfrw dwgReader18::parseDataPage function due to unchecked buffer size and page offsets. Attackers can craft an AC1018 R2004 DWG file with malicious startOffset values that cause decompress18 to wri...

8.5CVSS6.8AI score0.00171EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2023/02/15 3:46 a.m.•12 views

SUSE CVE-2021-21898

A code execution vulnerability exists in the dwgCompressor::decompress18 functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS8.1AI score0.02597EPSS
SaveExploits1References4
CNVD
CNVD
•added 2021/11/22 12:00 a.m.•82 views

LibreCad buffer overflow vulnerability

A buffer overflow vulnerability exists in LibreCAD, an open source CAD computer-aided design application from the LibreCAD organization, in LibreCad libdxfrw, which stems from the failure of the product's dwgCompressor::decompress18 function to properly handle special input data. An attacker coul...

8.8CVSS3.5AI score0.02597EPSS
SaveExploits1References1
osv_debian
osv_debian
•added 2021/11/19 8:15 p.m.•10 views

DEBIAN-CVE-2021-21898

A code execution vulnerability exists in the dwgCompressor::decompress18 functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS8.4AI score0.02597EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2021/11/19 8:15 p.m.•13 views

CVE-2021-21898

A code execution vulnerability exists in the dwgCompressor::decompress18 functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS7.6AI score0.02597EPSS
SaveExploits1References9
CVE
CVE
•added 2021/11/19 12:00 a.m.•149 views

CVE-2021-21898

CVE-2021-21898 affects LibreCAD/libdxfrw (2.2.0-rc2-19-ge02f3580). The vulnerability lies in dwgCompressor::decompress18(), where a crafted DWG can trigger an out-of-bounds write, enabling possible code execution. Public references from Gentoo GLSA, Debian DSA/DLA and openSUSE/NASL advisories con...

8.8CVSS8.5AI score0.02597EPSS
SaveExploits1References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/19 12:00 a.m.•8 views

CVE-2021-21898: Improper Restriction of Operations within the Bounds of a Memory Buffer

A code execution vulnerability exists in the dwgCompressor::decompress18 functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS6.2AI score0.02597EPSS
SaveExploits1References3
Mend
Mend
•added 2021/11/19 12:00 a.m.•6 views

CVE-2021-21898

A code execution vulnerability exists in the dwgCompressor::decompress18 functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS0.02597EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2021/11/17 12:00 a.m.•27 views

LibreCAD buffer error vulnerability

A buffer overflow vulnerability exists in LibreCAD, an open source CAD computer-aided design application from the LibreCAD organization, in LibreCad libdxfrw, which stems from the failure of the product's dwgCompressor::decompress18 function to properly handle special input data. An attacker coul...

8.8CVSS6AI score0.02597EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
•added 2021/08/04 12:00 a.m.•18 views

PT-2021-5117 · Librecad +2 · Libdxfrw +2

Name of the Vulnerable Software and Affected Versions: LibreCad libdxfrw version 2.2.0-rc2-19-ge02f3580 Description: A code execution issue exists in the dwgCompressor::decompress18 functionality. This can be triggered by a specially-crafted .dwg file, leading to an out-of-bounds write. An attack...

9.3CVSS7.4AI score0.06617EPSS
SaveExploits7References63
CNVD
CNVD
•added 2018/08/08 12:00 a.m.•20 views

Integer Overflow Vulnerability in libdxfrw 'dwgCompressor::decompress18' Function

libdxfrw is a C++ library for reading and writing DXF/DWG files. An integer overflow vulnerability exists in the 'dwgCompressor::decompress18' function in the dwgutil.cpp file in libdxfrw version 0.6.3. An attacker can exploit this vulnerability to cause an out-of-bounds read and crash the...

7.5CVSS7.7AI score0.01149EPSS
SaveExploits0References1
NVD
NVD
•added 2018/07/20 1:29 p.m.•26 views

CVE-2018-14444

libdxfrw 0.6.3 has an Integer Overflow in dwgCompressor::decompress18 in dwgutil.cpp, leading to an out-of-bounds read and application crash...

7.5CVSS7.5AI score0.01149EPSS
SaveExploits0References2
CVE
CVE
•added 2018/07/20 1:00 p.m.•54 views

CVE-2018-14444

The CVE affects libdxfrw 0.6.3, where an integer overflow in dwgCompressor::decompress18 (dwgutil.cpp) can trigger an out-of-bounds read and cause application crash. No exploitation details or remediation/version patch is provided in the connected documents; no specifics on affected products beyo...

7.5CVSS7.4AI score0.01149EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2018/07/20 1:00 p.m.•23 views

CVE-2018-14444

libdxfrw 0.6.3 has an Integer Overflow in dwgCompressor::decompress18 in dwgutil.cpp, leading to an out-of-bounds read and application crash...

8.7CVSS0.01149EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2018/07/20 12:00 a.m.•14 views

PT-2018-12521

Name of the Vulnerable Software and Affected Versions libdxfrw version 0.6.3 Description The issue is related to an Integer Overflow in the dwgCompressor::decompress18 function, located in dwgutil.cpp, which can cause an out-of-bounds read and lead to an application crash. Recommendations For...

7.5CVSS0.01149EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/07/20 12:00 a.m.•9 views

CVE-2018-14444: Out-of-bounds Read

libdxfrw 0.6.3 has an Integer Overflow in dwgCompressor::decompress18 in dwgutil.cpp, leading to an out-of-bounds read and application crash...

7.5CVSS7.2AI score0.01149EPSS
SaveExploits0References3
Rows per page
Query Builder