17495 matches found
CVE-2020-6610
GNU LibreDWG 0.9.3.2564 has an attempted excessive memory allocation in readsectionsmap in decoder2007.c...
CVE-2020-6609
GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in readpagesmap in decoder2007.c...
CVE-2020-6613
GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bitsearchsentinel in bits.c...
CVE-2020-6611
GNU LibreDWG 0.9.3.2564 has a NULL pointer dereference in getnextownedentity in dwg.c...
CVE-2020-6614
GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bfrread in decode.c...
CVE-2020-6610
GNU LibreDWG 0.9.3.2564 has an attempted excessive memory allocation in readsectionsmap in decoder2007.c...
CVE-2020-6612
GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in copycompressedbytes in decoder2007.c...
CVE-2020-6614
GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bfrread in decode.c...
CVE-2020-6615
GNU LibreDWG 0.9.3.2564 has an invalid pointer dereference in dwgdynapientityvalue in dynapi.c dynapi.c is generated by gen-dynapi.pl...
Heap overflow
GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bfrread in decode.c...
Heap overflow
GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in copycompressedbytes in decoder2007.c...
CVE-2020-6615
GNU LibreDWG 0.9.3.2564 has an invalid pointer dereference in dwgdynapientityvalue in dynapi.c dynapi.c is generated by gen-dynapi.pl...
Heap overflow
GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bitsearchsentinel in bits.c...
Null pointer dereference
GNU LibreDWG 0.9.3.2564 has a NULL pointer dereference in getnextownedentity in dwg.c...
CVE-2020-6609
GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in readpagesmap in decoder2007.c...
CVE-2020-6609
GNU LibreDWG 0.9.3.2564 contains a heap-based buffer over-read in read_pages_map (decode_r2007.c), identified as CVE-2020-6609. Multiple connected advisories confirm this vulnerability and state that fixes were delivered in LibreDWG 0.10, with related CVEs 2020-6610 to 2020-6615 addressed in the ...
CVE-2020-6610
CVE-2020-6610 affects GNU LibreDWG 0.9.3.2564 via an attempted memory allocation overflow in read_sections_map (decode_r2007.c). The issue is documented across multiple sources (NVD entry for CVE-2020-6610 and related OSV/OpenSUSE advisories) and is mitigated by updating libredwg to release 0.10,...
CVE-2020-6610
GNU LibreDWG 0.9.3.2564 has an attempted excessive memory allocation in readsectionsmap in decoder2007.c...
CVE-2020-6611
CVE-2020-6611 affects GNU LibreDWG 0.9.3.2564 with a NULL pointer dereference in get_next_owned_entity (dwg.c). The vulnerability can lead to a crash/denial of service. Connected advisories indicate fixes in LibreDWG to release 0.10 (e.g., openSUSE/SUSE updates referencing CVE-2020-6611 and libre...