PT-2024-41104 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: Libdwg affected versions not specified Description: The software contains an index-out-of-bounds issue discovered by OSS-Fuzz. The crash occurs within the dwg decode eed, dwg decode entity, and dwg decode RAY private functions. Recommendation...

PT-2023-35560 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details include a crash state involving the decode preR13 entities, decode preR13, a...

SUSE CVE-2020-21839

An issue was discovered in GNU LibreDWG 0.10. Crafted input will lead to an memory leak in dwgdecodeeed ../../src/decode.c:3638...

PT-2022-36810

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions dwg decode INSERT private, dwg decode INSERT, and dwg decode add...

PT-2022-36791 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue is identified, potentially causing a crash. The crash involves the functions bit calc CRC, decode preR13, and dwg decod...

PT-2022-37155 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow WRITE 4 crash type. The crash state involves functions such as decode preR13 section hdr, decode preR13, a...

PT-2022-37149

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the dwg decode LWPOLYLINE private, dwg decode LWPOLYLINE, and dwg decode add obje...

PT-2022-36965

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow WRITE 4 crash type. The crash state involves functions such as decode preR13 section hdr, decode preR13, and...

PT-2022-36818

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is related to a stack-buffer-overflow crash, specifically a WRITE 1 type. The crash occurs in the decompress rNUMBER, read rNUMBER meta data, an...

PT-2019-16043

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions prior to 0.93 Description An issue in GNU LibreDWG allows crafted input to cause an attempted excessive memory allocation in the dwg decode SPLINE private function in dwg.spec. Recommendations For GNU LibreDWG versions...

PT-2019-16047

Name of the Vulnerable Software and Affected Versions GNU LibreDWG version 0.92 Description An issue in GNU LibreDWG allows crafted input to cause an attempted excessive memory allocation in the dwg decode HATCH private function within dwg.spec. Recommendations For GNU LibreDWG version 0.92,...

PT-2019-16050

Name of the Vulnerable Software and Affected Versions GNU LibreDWG version 0.92 Description An issue was discovered where crafted input leads to an attempted excessive memory allocation in the dwg decode LWPOLYLINE private function within dwg.spec. Recommendations For GNU LibreDWG version 0.92, a...

PT-2019-19864

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions 0.7 through 0.7.1645 Description A heap-based buffer overflow issue exists in the dwg decode eed data function at decode.c for the z dimension. Recommendations For GNU LibreDWG versions 0.7 through 0.7.1645, consider...

PT-2019-19861

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions 0.7 through 0.7.1645 Description A heap-based buffer overflow issue exists in the function dwg decode eed data at decode.c, specifically affecting the y dimension. Recommendations For GNU LibreDWG versions 0.7 through...