PT-2019-19865

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions 0.7 through 0.7.1645 Description An issue was discovered in the function bit read B at bits.c, which results in an out-of-bounds read. Recommendations For GNU LibreDWG versions 0.7 through 0.7.1645, consider restricting...

CVE-2018-14524

dwgdecodeeed in decode.c in GNU LibreDWG before 0.6 leads to a double free in dwgfreeeed in free.c because it does not properly manage the obj-eed value after a free occurs...

Double free

dwgdecodeeed in decode.c in GNU LibreDWG before 0.6 leads to a double free in dwgfreeeed in free.c because it does not properly manage the obj-eed value after a free occurs...

CVE-2018-14524

dwgdecodeeed in decode.c in GNU LibreDWG before 0.6 leads to a double free in dwgfreeeed in free.c because it does not properly manage the obj-eed value after a free occurs...

CVE-2018-14524

dwgdecodeeed in decode.c in GNU LibreDWG before 0.6 leads to a double free in dwgfreeeed in free.c because it does not properly manage the obj-eed value after a free occurs...

CVE-2018-14524

CVE-2018-14524 affects GNU LibreDWG prior to 0.6, with a double-free in dwg_free_eed due to improper management of obj->eed after free during dwg_decode_eed. Affected component: LibreDWG (C library for DWG handling). Root cause: freeing obj->eed without proper reinitialization/handling. Imp...

CVE-2018-14524

dwgdecodeeed in decode.c in GNU LibreDWG before 0.6 leads to a double free in dwgfreeeed in free.c because it does not properly manage the obj-eed value after a free occurs...

CVE-2018-14524: Double Free

dwgdecodeeed in decode.c in GNU LibreDWG before 0.6 leads to a double free in dwgfreeeed in free.c because it does not properly manage the obj-eed value after a free occurs...

PT-2018-12565

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions prior to 0.6 Description The issue arises from improper management of the obj-eed value after a free occurs in the dwg decode eed function in decode.c, leading to a double free in the dwg free eed function in free.c...

CVE-2018-14471

dwgobjblockcontrolgetblockheaders in dwgapi.c in GNU LibreDWG 0.5.1048 allows remote attackers to cause a denial of service NULL pointer dereference and SEGV via a crafted dwg file...

CVE-2018-14471

dwgobjblockcontrolgetblockheaders in dwgapi.c in GNU LibreDWG 0.5.1048 allows remote attackers to cause a denial of service NULL pointer dereference and SEGV via a crafted dwg file...

CVE-2018-14471

CVE-2018-14471 affects GNU LibreDWG 0.5.1048, where dwg_obj_block_control_get_block_headers (dwg_api.c) can be triggered by a crafted DWG file to cause a denial of service via a NULL pointer dereference/SEGV. The issue is corroborated across multiple issuances (e.g., Red Hat, SUSE, CNVD, OSV, NVD...

CVE-2018-14471

dwgobjblockcontrolgetblockheaders in dwgapi.c in GNU LibreDWG 0.5.1048 allows remote attackers to cause a denial of service NULL pointer dereference and SEGV via a crafted dwg file...

CVE-2018-14471

dwgobjblockcontrolgetblockheaders in dwgapi.c in GNU LibreDWG 0.5.1048 allows remote attackers to cause a denial of service NULL pointer dereference and SEGV via a crafted dwg file...

Code injection

getfirstownedobject in dwg.c in GNU LibreDWG 0.5.1036 allows remote attackers to cause a denial of service SEGV...

CVE-2018-14443

getfirstownedobject in dwg.c in GNU LibreDWG 0.5.1036 allows remote attackers to cause a denial of service SEGV...

CVE-2018-14443

getfirstownedobject in dwg.c in GNU LibreDWG 0.5.1036 allows remote attackers to cause a denial of service SEGV...

CVE-2018-14443

The CVE affects GNU LibreDWG, specifically the dwg.c file function get_first_owned_object in version 0.5.1036. The underlying issue allows remote attackers to cause a denial of service via a segmentation fault (SEGV). The provided connected documents confirm the affected component and the crash b...

CVE-2018-14443

getfirstownedobject in dwg.c in GNU LibreDWG 0.5.1036 allows remote attackers to cause a denial of service SEGV...

PT-2018-12520

Name of the Vulnerable Software and Affected Versions GNU LibreDWG version 0.5.1036 Description The issue allows remote attackers to cause a denial of service, resulting in a SEGV. This is due to the get first owned object function in dwg.c. Recommendations For GNU LibreDWG version 0.5.1036,...