CVE-2019-9773: Out-of-bounds Write

An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer overflow in the function dwgdecodeeeddata at decode.c for the z dimension...

CVE-2019-9774: Out-of-bounds Read

An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is an out-of-bounds read in the function bitreadB at bits.c...

PT-2019-19869

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions 0.7 through 0.7.1645 Description A heap-based buffer over-read issue exists in the dwg dxf LTYPE function at dwg.spec. Recommendations For GNU LibreDWG versions 0.7 through 0.7.1645, consider disabling the dwg dxf LTYPE...

CVE-2019-9775: Out-of-bounds Read

An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is an out-of-bounds read in the function dwgdxfBLOCKCONTROL at dwg.spec...

PT-2019-19870

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions 0.7 through 0.7.1645 Description An issue was discovered in GNU LibreDWG. There is a NULL pointer dereference in the function dwg dxf LTYPE at dwg.spec. Recommendations For GNU LibreDWG versions 0.7 through 0.7.1645, as a...

PT-2019-19863

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions 0.7 through 0.7.1645 Description An issue was discovered in GNU LibreDWG. There is a NULL pointer dereference in the function dwg dxf LEADER at dwg.spec. Recommendations For GNU LibreDWG versions 0.7 through 0.7.1645,...

GNU LibreDWG Heap Buffer Overflow Vulnerability

GNU LibreDWG is a GNU Project C library for working with DWG files. A buffer overflow vulnerability exists in the 'dwgdecodeeeddata' function of the decode.c file in GNU LibreDWG version 0.7 and version 0.7.1645. An attacker could exploit this vulnerability to cause a denial of service...

GNU LibreDWG Buffer Overflow Vulnerability (CNVD-2019-12552)

GNU LibreDWG is a GNU Project C library for working with DWG files. A buffer overflow vulnerability exists in the 'bitreadB' function of the bits.c file in GNU LibreDWG version 0.7 and 0.7.1645. An attacker could exploit this vulnerability to cause a denial of service or disclose information...

CVE-2019-9778: Out-of-bounds Read

An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer over-read in the function dwgdxfLTYPE at dwg.spec...

PT-2019-19867

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions 0.7 through 0.7.1645 Description An issue was discovered in the function dwg dxf LTYPE at dwg.spec, which results in a NULL pointer dereference. Recommendations For GNU LibreDWG versions 0.7 through 0.7.1645, consider...

CVE-2019-9770: Out-of-bounds Write

An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer overflow in the function dwgdecodeeeddata at decode.c for the y dimension...

CVE-2019-9779: NULL Pointer Dereference

An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in the function dwgdxfLTYPE at dwg.spec earlier than CVE-2019-9776...

CVE-2019-9772: NULL Pointer Dereference

An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in the function dwgdxfLEADER at dwg.spec...

CVE-2019-9776: NULL Pointer Dereference

An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in the function dwgdxfLTYPE at dwg.spec later than CVE-2019-9779...

PT-2019-19866

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions 0.7 through 0.7.1645 Description An issue was discovered in the function dwg dxf BLOCK CONTROL at dwg.spec, which results in an out-of-bounds read. Recommendations For GNU LibreDWG versions 0.7 through 0.7.1645, consider...

PT-2019-19861

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions 0.7 through 0.7.1645 Description A heap-based buffer overflow issue exists in the function dwg decode eed data at decode.c, specifically affecting the y dimension. Recommendations For GNU LibreDWG versions 0.7 through...

PT-2019-19862

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions 0.7 through 0.7.1645 Description An issue was discovered in GNU LibreDWG. There is a NULL pointer dereference in the function bit convert TU at bits.c. Recommendations For GNU LibreDWG versions 0.7 through 0.7.1645, as a...

CVE-2019-9777: Out-of-bounds Read

An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer over-read in the function dxfheaderwrite at headervariablesdxf.spec...

PT-2019-19868

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions 0.7 through 0.7.1645 Description A heap-based buffer over-read issue was found in the dxf header write function at header variables dxf.spec. Recommendations For GNU LibreDWG versions 0.7 through 0.7.1645, consider...

CVE-2019-9771: NULL Pointer Dereference

An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in the function bitconvertTU at bits.c...