15 matches found
CVE-2026-62250
LibreDWG is a free C library to read and write DWG files. Prior to 0.14.8413, a crafted pre-R13 DWG can make decodepreR13entities in src/decode.c enter a nonterminating loop that allocates a new object each iteration. decodepreR13 in src/decoder11.c computes size from the raw file-controlled...
CVE-2026-62250
The LibreDWG C library (prior to version 0.14.8413 ) is vulnerable to a denial of service (DoS) via a nonterminating loop in the decode_preR13_entities() function located in src/decode.c. A crafted pre-R13 DWG file can trigger this loop because the decode_preR13 function in src/decode_r11.c fails...
CVE-2026-62250 LibreDWG: unbounded allocation in pre-R13 DWG entity decoding
LibreDWG is a free C library to read and write DWG files. Prior to 0.14.8413, a crafted pre-R13 DWG can make decodepreR13entities in src/decode.c enter a nonterminating loop that allocates a new object each iteration. decodepreR13 in src/decoder11.c computes size from the raw file-controlled...
EUVD-2026-114463
LibreDWG is a free C library to read and write DWG files. Prior to 0.14.8413, a crafted pre-R13 DWG can make decodepreR13entities in src/decode.c enter a nonterminating loop that allocates a new object each iteration. decodepreR13 in src/decoder11.c computes size from the raw file-controlled...
CVE-2026-62250: libredwg: LibreDWG is a free C library to read and write DWG files
LibreDWG is a free C library to read and write DWG files. Prior to 0.14.8413, a crafted pre-R13 DWG can make decodepreR13entities in src/decode.c enter a nonterminating loop that allocates a new object each iteration. decodepreR13 in src/decoder11.c computes size from the raw file-controlled...
EUVD-2022-36090
Malicious code in bioql PyPI...
CVE-2022-33033
LibreDWG v0.12.4.4608 was discovered to contain a double-free via the function dwgreadfile at dwg.c...
SUSE CVE-2022-33033
LibreDWG v0.12.4.4608 was discovered to contain a double-free via the function dwgreadfile at dwg.c...
CVE-2022-33033
LibreDWG v0.12.4.4608 was discovered to contain a double-free via the function dwgreadfile at dwg.c...
CVE-2022-33033
LibreDWG v0.12.4.4608 was discovered to contain a double-free via the function dwgreadfile at dwg.c...
CVE-2022-33033
LibreDWG v0.12.4.4608 was discovered to contain a double-free via the function dwgreadfile at dwg.c...
CVE-2022-33033
CVE-2022-33033 affects LibreDWG (GNU LibreDWG) v0.12.4.4608. The vulnerability is a double-free in dwg_read_file() within dwg.c. According to the CVSS data, it has a high impact on confidentiality, integrity, and availability, with a local exposure that requires user interaction; exploitation det...
CVE-2022-33033
LibreDWG v0.12.4.4608 was discovered to contain a double-free via the function dwgreadfile at dwg.c...
