EUVD-2020-27759

Malware in sbrugna...

SUSE CVE-2020-6611

GNU LibreDWG 0.9.3.2564 has a NULL pointer dereference in getnextownedentity in dwg.c...

CVE-2022-33033

LibreDWG v0.12.4.4608 was discovered to contain a double-free via the function dwgreadfile at dwg.c...

Double free

LibreDWG v0.12.4.4608 was discovered to contain a double-free via the function dwgreadfile at dwg.c...

Heap overflow

LibreDWG v0.12.4.4608 was discovered to contain a heap-use-after-free via the function dwgaddhandleref at dwg.c...

CVE-2022-33033

CVE-2022-33033 affects LibreDWG (GNU LibreDWG) v0.12.4.4608. The vulnerability is a double-free in dwg_read_file() within dwg.c. According to the CVSS data, it has a high impact on confidentiality, integrity, and availability, with a local exposure that requires user interaction; exploitation det...

CVE-2020-6611

GNU LibreDWG 0.9.3.2564 has a NULL pointer dereference in getnextownedentity in dwg.c...

CVE-2020-6611

CVE-2020-6611 affects GNU LibreDWG 0.9.3.2564 with a NULL pointer dereference in get_next_owned_entity (dwg.c). The vulnerability can lead to a crash/denial of service. Connected advisories indicate fixes in LibreDWG to release 0.10 (e.g., openSUSE/SUSE updates referencing CVE-2020-6611 and libre...

CVE-2020-6611

GNU LibreDWG 0.9.3.2564 has a NULL pointer dereference in getnextownedentity in dwg.c...

CVE-2018-14443

getfirstownedobject in dwg.c in GNU LibreDWG 0.5.1036 allows remote attackers to cause a denial of service SEGV...

CVE-2018-14443

getfirstownedobject in dwg.c in GNU LibreDWG 0.5.1036 allows remote attackers to cause a denial of service SEGV...

CVE-2018-14443

The CVE affects GNU LibreDWG, specifically the dwg.c file function get_first_owned_object in version 0.5.1036. The underlying issue allows remote attackers to cause a denial of service via a segmentation fault (SEGV). The provided connected documents confirm the affected component and the crash b...