Lucene search
+L

6 matches found

CVE
CVE
•added 2021/11/19 12:00 a.m.•134 views

CVE-2021-21898

CVE-2021-21898 affects LibreCAD/libdxfrw (2.2.0-rc2-19-ge02f3580). The vulnerability lies in dwgCompressor::decompress18(), where a crafted DWG can trigger an out-of-bounds write, enabling possible code execution. Public references from Gentoo GLSA, Debian DSA/DLA and openSUSE/NASL advisories con...

8.8CVSS8.5AI score0.02597EPSS
SaveExploits1References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/19 12:00 a.m.•3 views

CVE-2021-21898: Improper Restriction of Operations within the Bounds of a Memory Buffer

A code execution vulnerability exists in the dwgCompressor::decompress18 functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS6.2AI score0.02597EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2021/11/17 12:00 a.m.•18 views

LibreCAD 缓冲区错误漏洞

A buffer overflow vulnerability exists in LibreCAD, an open source CAD computer-aided design application from the LibreCAD organization, in LibreCad libdxfrw, which stems from the failure of the product's dwgCompressor::decompress18 function to properly handle special input data. An attacker coul...

8.8CVSS6AI score0.02597EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
•added 2021/08/04 12:00 a.m.•11 views

PT-2021-5117 · Librecad +2 · Libdxfrw +2

Name of the Vulnerable Software and Affected Versions: LibreCad libdxfrw version 2.2.0-rc2-19-ge02f3580 Description: A code execution issue exists in the dwgCompressor::decompress18 functionality. This can be triggered by a specially-crafted .dwg file, leading to an out-of-bounds write. An attack...

9.3CVSS7.4AI score0.06617EPSS
SaveExploits7References63
NVD
NVD
•added 2018/07/20 1:29 p.m.•21 views

CVE-2018-14444

libdxfrw 0.6.3 has an Integer Overflow in dwgCompressor::decompress18 in dwgutil.cpp, leading to an out-of-bounds read and application crash...

7.5CVSS7.5AI score0.01149EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/07/20 12:00 a.m.•4 views

CVE-2018-14444: Out-of-bounds Read

libdxfrw 0.6.3 has an Integer Overflow in dwgCompressor::decompress18 in dwgutil.cpp, leading to an out-of-bounds read and application crash...

7.5CVSS7.2AI score0.01149EPSS
SaveExploits0References3
Rows per page
Query Builder