CVE-2020-21843: Out-of-bounds Write

A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bitreadRC ../../src/bits.c:318...

PT-2021-10675

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists, which can be triggered via the read 2004 compressed section function in the decode.c file. Recommendations: For GNU LibreDWG version 0.10, consider applying a...

CVE-2020-21834: NULL Pointer Dereference

A null pointer deference issue exists in GNU LibreDWG 0.10 via getbmp ../../programs/dwgbmp.c:164...

CVE-2020-21814: Out-of-bounds Write

A heap based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via htmlwescape ../../programs/escape.c:97...

PT-2021-10683

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists in the read 2004 section appinfo function, located in the decode.c file. This issue can be exploited via the read 2004 section appinfo function. Recommendations:...

PT-2021-10674

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10.2641 Description: A heap-based buffer overflow issue exists. The problem is located in the escape.c file at line 51, specifically via htmlescape. Recommendations: For GNU LibreDWG version 0.10.2641, consider...

PT-2021-10669

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10.2641 Description: A heap-based buffer overflow issue exists in the software. The issue is located in the ../../programs/escape.c file at line 97, and is related to the htmlwescape function. Recommendations: For GNU...

PT-2021-10671

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10.2641 Description: A heap-based buffer overflow issue exists in GNU LibreDWG. The issue is related to the htmlescape function in the escape.c file. Recommendations: For GNU LibreDWG version 0.10.2641, at the moment,...

GNU LibreDWG buffer error vulnerability

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10.2641. An attacker can exploit this vulnerability via htmlescape ... /... /programs/escape.c:46 to exploit the vulnerability and cause a heap buffer overflow...

CVE-2020-21839: Missing Release of Memory after Effective Lifetime

An issue was discovered in GNU LibreDWG 0.10. Crafted input will lead to an memory leak in dwgdecodeeed ../../src/decode.c:3638...

CVE-2020-21841: Out-of-bounds Write

A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bitreadB ../../src/bits.c:135...

CVE-2020-21835: NULL Pointer Dereference

A null pointer deference issue exists in GNU LibreDWG 0.10 via read2004compressedsection ../../src/decode.c:2337...

CVE-2020-21832: Out-of-bounds Write

A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read2004compressedsection ../../src/decode.c:2417...

CVE-2020-21830: Out-of-bounds Write

A heap based buffer overflow vulneraibility exists in GNU LibreDWG 0.10 via bitcalcCRC ../../src/bits.c:2213...

CVE-2020-21816: Out-of-bounds Write

A heab based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:46...

CVE-2020-21813: Out-of-bounds Write

A heap based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via outputTEXT ../../programs/dwg2SVG.c:114...

CVE-2020-21819: Out-of-bounds Write

A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10.2641via htmlescape ../../programs/escape.c:51...

CVE-2020-21817: NULL Pointer Dereference

A null pointer dereference issue exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:29. which causes a denial of service application crash...

CVE-2020-21815: NULL Pointer Dereference

A null pointer deference issue exists in GNU LibreDWG 0.10.2641 via outputTEXT ../../programs/dwg2SVG.c:114, which causes a denial of service application crash...

CVE-2020-21844: Undefined Security Weakness

GNU LibreDWG 0.10 is affected by: memcpy-param-overlap. The impact is: execute arbitrary code remote. The component is: read2004sectionheader ../../src/decode.c:2580...