CVE-2021-21899

CVE-2021-21899 affects LibreCAD/libdxfrw: the heap buffer overflow in dwgCompressor::copyCompBytes21 when parsing crafted .dwg files can lead to code execution. Public advisories indicate multiple distro fixes (Debian DSA-5077, DLA-2838-1; Gentoo GLSA-202305-26; openSUSE/SUSE updates; Ubuntu USN-...

CVE-2021-21898

CVE-2021-21898 affects LibreCAD/libdxfrw (2.2.0-rc2-19-ge02f3580). The vulnerability lies in dwgCompressor::decompress18(), where a crafted DWG can trigger an out-of-bounds write, enabling possible code execution. Public references from Gentoo GLSA, Debian DSA/DLA and openSUSE/NASL advisories con...

CVE-2021-21900

A code execution vulnerability exists in the dxfRW::processLType functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dxf file can lead to a use-after-free vulnerability. An attacker can provide a malicious file to trigger this vulnerability...

LibreCad libdxfrw dwgCompressor::decompress18() out-of-bounds write vulnerability

Talos Vulnerability Report TALOS-2021-1349 LibreCad libdxfrw dwgCompressor::decompress18 out-of-bounds write vulnerability November 17, 2021 CVE Number CVE-2021-21898 SUMMARY A code execution vulnerability exists in the dwgCompressor::decompress18 functionality of LibreCad libdxfrw...

LibreCAD 缓冲区错误漏洞

A buffer error vulnerability exists in LibreCAD, an open source CAD computer-aided design application from the LibreCAD organization, in LibreCad libdxfrw, which stems from the failure of the product's dwgCompressor::copyCompBytes21 function to properly handle special input data. An attacker coul...

LibreCad libdxfrw dwgCompressor::copyCompBytes21 heap-based buffer overflow vulnerability

Talos Vulnerability Report TALOS-2021-1350 LibreCad libdxfrw dwgCompressor::copyCompBytes21 heap-based buffer overflow vulnerability November 17, 2021 CVE Number CVE-2021-21899 SUMMARY A code execution vulnerability exists in the dwgCompressor::copyCompBytes21 functionality of LibreCad libdxfrw...

PT-2021-5231 · Librecad +2 · Libdxfrw +2

Name of the Vulnerable Software and Affected Versions: LibreCad libdxfrw version 2.2.0-rc2-19-ge02f3580 Description: A code execution issue exists in the dxfRW::processLType functionality. This is due to a use-after-free vulnerability that can be triggered by a specially-crafted .dxf file, allowi...

PT-2021-5221 · Librecad +2 · Libdxfrw +2

Name of the Vulnerable Software and Affected Versions: LibreCad libdxfrw version 2.2.0-rc2-19-ge02f3580 Description: A code execution issue exists in the dwgCompressor::copyCompBytes21 functionality due to a heap buffer overflow. This can be triggered by a specially-crafted .dwg file, allowing an...

PT-2021-5117 · Librecad +2 · Libdxfrw +2

Name of the Vulnerable Software and Affected Versions: LibreCad libdxfrw version 2.2.0-rc2-19-ge02f3580 Description: A code execution issue exists in the dwgCompressor::decompress18 functionality. This can be triggered by a specially-crafted .dwg file, leading to an out-of-bounds write. An attack...

Integer Overflow Vulnerability in libdxfrw 'dwgCompressor::decompress18' Function

libdxfrw is a C++ library for reading and writing DXF/DWG files. An integer overflow vulnerability exists in the 'dwgCompressor::decompress18' function in the dwgutil.cpp file in libdxfrw version 0.6.3. An attacker can exploit this vulnerability to cause an out-of-bounds read and crash the...

Integer overflow

libdxfrw 0.6.3 has an Integer Overflow in dwgCompressor::decompress18 in dwgutil.cpp, leading to an out-of-bounds read and application crash...

CVE-2018-14444

libdxfrw 0.6.3 has an Integer Overflow in dwgCompressor::decompress18 in dwgutil.cpp, leading to an out-of-bounds read and application crash...

CVE-2018-14444

The CVE affects libdxfrw 0.6.3, where an integer overflow in dwgCompressor::decompress18 (dwgutil.cpp) can trigger an out-of-bounds read and cause application crash. No exploitation details or remediation/version patch is provided in the connected documents; no specifics on affected products beyo...