PT-2023-35977 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash occurred due to a segmentation fault on an unknown address. The crash involved the dwg encode function in the llvmfuzz.c file. No information is...

PT-2023-35777 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 8 crash has been reported. The crash occurs in the dwg encode function, as indicated by the crash state. This issue is relate...

SUSE CVE-2019-20909

An issue was discovered in GNU LibreDWG through 0.9.3. There is a NULL pointer dereference in the function dwgencodeLWPOLYLINE in dwg.spec...

SUSE CVE-2021-36080

GNU LibreDWG 0.12.3.4163 through 0.12.3.4191 has a double-free in bitchainfree called from dwgencodeMTEXT and dwgencodeaddobject...

PT-2022-36967

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash, specifically a Segv on an unknown address. The crash state includes functions such as bit write TV, bit write T, and dwg...

PT-2022-36962

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. Technical details include a crash state involving function calls such as dwg encode VERTEX 2D, d...

PT-2021-28161

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 4 crash has been reported. The crash involves the encode 3dsolid, dwg encode BODY private, and dwg encode BODY functions. No...

PT-2021-28143

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-double-free crash. Technical details about the crash include the functions bit chain free, dwg encode MTEXT, and dwg encode...

PT-2021-28141

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 4 crash has been reported. The crash involves the encode 3dsolid, dwg encode REGION private, and dwg encode REGION functions. N...

GNU LibreDWG Heap Buffer Overflow Vulnerability

GNU LibreDWG is a GNU Project C library for working with DWG files. A security vulnerability exists in the dwgencodeentity of the commonentitydata.spec file in GNU LibreDWG version 0.9.3 and earlier. The vulnerability stems from a networked system or product performing operations in memory withou...

PT-2020-10867

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions through 0.9.3 Description An issue was discovered in GNU LibreDWG. There is a NULL pointer dereference in the function dwg encode LWPOLYLINE in dwg.spec. Recommendations For GNU LibreDWG versions through 0.9.3, consider...

PT-2020-10871

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions through 0.9.3 Description An issue was discovered where crafted input leads to a heap-based buffer over-read in dwg encode entity in common entity data.spec. Recommendations For GNU LibreDWG versions through 0.9.3, consid...

PT-2020-10872

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions through 0.9.3 Description An issue was discovered in GNU LibreDWG. There is a NULL pointer dereference in the function dwg encode common entity handle data in common entity handle data.spec. Recommendations For GNU LibreD...