10 matches found
EUVD-2020-14605
Malware in sbrugna...
OSV-2025-165 Index-out-of-bounds in dwg_decode_eed
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=398439334 Crash type: Index-out-of-bounds Crash state: dwgdecodeeed dwgdecodeentity dwgdecode3DFACEprivate...
OSV-2024-1375 Index-out-of-bounds in dwg_decode_eed
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=383814052 Crash type: Index-out-of-bounds Crash state: dwgdecodeeed dwgdecodeentity dwgdecodeRAYprivate...
Design/Logic Flaw
An issue was discovered in GNU LibreDWG 0.10. Crafted input will lead to an memory leak in dwgdecodeeed ../../src/decode.c:3638...
CVE-2020-21839
An issue was discovered in GNU LibreDWG 0.10. Crafted input will lead to an memory leak in dwgdecodeeed ../../src/decode.c:3638...
CVE-2020-21839
GNU LibreDWG 0.10 is affected by a memory leak in the dwg_decode_eed path (decode.c:3638) triggered by crafted input. Connected sources consistently describe the vulnerability but do not provide a patch or remediation details; no exploitation status is stated. Monitor for updates for a fix.
GNU LibreDWG 安全漏洞
LibreDWG is a free C library for reading and writing DWG files. GNU LibreDWG version 0.10 in dwgdecodeeed ... /... A memory leak vulnerability exists in /src/decode.c:3638. An attacker could cause a memory leak by exploiting this vulnerability via specially crafted input...
CVE-2018-14524
dwgdecodeeed in decode.c in GNU LibreDWG before 0.6 leads to a double free in dwgfreeeed in free.c because it does not properly manage the obj-eed value after a free occurs...
CVE-2018-14524
dwgdecodeeed in decode.c in GNU LibreDWG before 0.6 leads to a double free in dwgfreeeed in free.c because it does not properly manage the obj-eed value after a free occurs...
CVE-2018-14524
CVE-2018-14524 affects GNU LibreDWG prior to 0.6, with a double-free in dwg_free_eed due to improper management of obj->eed after free during dwg_decode_eed. Affected component: LibreDWG (C library for DWG handling). Root cause: freeing obj->eed without proper reinitialization/handling. Imp...