1389 matches found
GNU LibreDWG Heap Buffer Overflow Vulnerability
GNU LibreDWG is a GNU Project C library for working with DWG files. A security vulnerability exists in the dwgencodeentity of the commonentitydata.spec file in GNU LibreDWG version 0.9.3 and earlier. The vulnerability stems from a networked system or product performing operations in memory withou...
GNU LibreDWG Resource Management Error Vulnerability
GNU LibreDWG is a GNU Project C library for working with DWG files. A resource management error vulnerability exists in the 'dwgencodeLWPOLYLINE' function of the dwg.spec file in GNU LibreDWG version 0.9.3 and earlier. The vulnerability stems from mismanagement of system resources e.g., memory,...
GNU LibreDWG Denial of Service Vulnerability
GNU LibreDWG is a GNU Project C library for working with DWG files. A security vulnerability exists in the bitcalcCRC of the bits.c file in GNU LibreDWG version 0.9.3 and earlier. An attacker could exploit this vulnerability to cause a denial of service...
GNU LibreDWG bits.c buffer overflow vulnerability
GNU LibreDWG is a C language library for working with DWG files. A buffer overflow vulnerability exists in GNU LibreDWG bits.c, which can be exploited by a remote attacker to submit a specially crafted malicious file that can be tricked into parsing to execute arbitrary code in the context of an...
GNU LibreDWG Buffer Overflow Vulnerability (CNVD-2021-01288)
GNU LibreDWG is a GNU Project C library for working with DWG files. A buffer overflow vulnerability exists in the bitwriteTF of the bits.c file in GNU LibreDWG version 0.9.3 and earlier. The vulnerability stems from a networked system or product performing operations in memory without properly...
CVE-2020-15807
GNU LibreDWG before 0.11 allows NULL pointer dereferences via crafted input files...
CVE-2020-15807
GNU LibreDWG before 0.11 allows NULL pointer dereferences via crafted input files...
Null pointer dereference
GNU LibreDWG before 0.11 allows NULL pointer dereferences via crafted input files...
CVE-2020-15807
GNU LibreDWG before 0.11 allows NULL pointer dereferences via crafted input files...
CVE-2020-15807
GNU LibreDWG (C library) prior to version 0.11 is affected by a NULL pointer dereference when processing crafted input files. This vulnerability, CVE-2020-15807, is documented across multiple feeds (NVD entry notes a NULL pointer dereference; Red Hat/SUSE/CNVD mirrors echo the same description). ...
CVE-2020-15807
GNU LibreDWG before 0.11 allows NULL pointer dereferences via crafted input files...
CVE-2020-15807: NULL Pointer Dereference
GNU LibreDWG before 0.11 allows NULL pointer dereferences via crafted input files...
PT-2020-14643
Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions prior to 0.11 Description The issue allows NULL pointer dereferences via crafted input files, which can lead to potential security problems. Recommendations For GNU LibreDWG versions prior to 0.11, update to version 0.11 ...
CVE-2019-20911
An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to denial of service in bitcalcCRC in bits.c, related to a for loop...
CVE-2019-20915
An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in bitwriteTF in bits.c...
CVE-2019-20910
An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in decodeR13R2000 in decode.c, a different vulnerability than CVE-2019-20011...
CVE-2019-20912
An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a stack overflow in bits.c, possibly related to bitreadTF...
CVE-2019-20914
An issue was discovered in GNU LibreDWG through 0.9.3. There is a NULL pointer dereference in the function dwgencodecommonentityhandledata in commonentityhandledata.spec...