1389 matches found
CVE-2019-20015
CVE-2019-20015 affects GNU LibreDWG 0.92. Crafted input can trigger an excessive memory allocation in dwg_decode_LWPOLYLINE_private (dwg.spec). Public U/A details are provided across multiple advisories; exploitability status is not stated in the provided documents. OpenSUSE/SUSE advisories show ...
CVE-2019-20015
An issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive memory allocation in dwgdecodeLWPOLYLINEprivate in dwg.spec...
CVE-2019-20010
An issue was discovered in GNU LibreDWG 0.92. There is a use-after-free in resolveobjectrefvector in decode.c...
CVE-2019-20010
CVE-2019-20010 affects GNU LibreDWG 0.92 with a use-after-free in resolve_objectref_vector (decode.c). Connected advisories show openSUSE/libredwg updates up to release 0.9.3 addressing this and related CVEs (e.g., 2019-20010, 2019-20011, 2019-20012, 2019-20013, 2019-20014, 2019-20015) across Ope...
CVE-2019-20010
An issue was discovered in GNU LibreDWG 0.92. There is a use-after-free in resolveobjectrefvector in decode.c...
GNU LibreDWG Excessive Memory Allocation Vulnerability (CNVD-2020-03561)
LibreDWG is a free C library for reading and writing DWG files. An excessive memory allocation vulnerability exists in dwgdecodeHATCHprivate in dwg.spec in GNU LibreDWG 0.92. An attacker can exploit this vulnerability via specially crafted input to cause an attempt to allocate too much memory,...
GNU LibreDWG Post-Release Reuse Vulnerability
GNU LibreDWG is a GNU Project C library for working with DWG files. A post-release reuse vulnerability exists in the 'resolveobjectrefvector' function in the decode.c file in GNU LibreDWG version 0.92. The vulnerability stems from mismanagement of system resources e.g., memory, disk space, files,...
CVE-2019-20014: Double Free
An issue was discovered in GNU LibreDWG before 0.93. There is a double-free in dwgfree in free.c...
GNU LibreDWG Excessive Memory Allocation Vulnerability (CNVD-2020-03562)
GNU LibreDWG is a GNU Project C library for working with DWG files. A security vulnerability exists in the 'decode3dsolid' function of dwg.spec in versions of GNU LibreDWG prior to 0.93. An attacker can exploit this vulnerability to cause a denial of service large memory consumption...
GNU LibreDWG Double Release Vulnerability
GNU LibreDWG is a GNU Project C library for working with DWG files. A double release vulnerability exists in the 'dwgfree' function of the free.c file in GNU LibreDWG versions prior to 0.93. The vulnerability stems from mismanagement of system resources e.g., memory, disk space, files, etc. by a...
CVE-2019-20011: Out-of-bounds Read
An issue was discovered in GNU LibreDWG 0.92. There is a heap-based buffer over-read in decodeR13R2000 in decode.c...
GNU LibreDWG Excessive Memory Allocation Vulnerability
GNU LibreDWG is a GNU Project C library for working with DWG files. A security vulnerability exists in the 'dwgdecodeLWPOLYLINEprivate' function of dwg.spec in GNU LibreDWG version 0.92. An attacker can exploit this vulnerability to cause a denial of service large memory consumption with the help...
PT-2019-16045
Name of the Vulnerable Software and Affected Versions GNU LibreDWG version 0.92 Description A use-after-free issue was discovered in the resolve objectref vector function within the decode.c file. Recommendations For GNU LibreDWG version 0.92, at the moment, there is no information about a newer...
PT-2019-16043
Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions prior to 0.93 Description An issue in GNU LibreDWG allows crafted input to cause an attempted excessive memory allocation in the dwg decode SPLINE private function in dwg.spec. Recommendations For GNU LibreDWG versions...
PT-2019-16048
Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions prior to 0.93 Description An issue in GNU LibreDWG allows crafted input to cause an attempted excessive memory allocation in the decode 3dsolid function in dwg.spec, potentially leading to issues. Recommendations For...
PT-2019-16050
Name of the Vulnerable Software and Affected Versions GNU LibreDWG version 0.92 Description An issue was discovered where crafted input leads to an attempted excessive memory allocation in the dwg decode LWPOLYLINE private function within dwg.spec. Recommendations For GNU LibreDWG version 0.92, a...
PT-2019-16047
Name of the Vulnerable Software and Affected Versions GNU LibreDWG version 0.92 Description An issue in GNU LibreDWG allows crafted input to cause an attempted excessive memory allocation in the dwg decode HATCH private function within dwg.spec. Recommendations For GNU LibreDWG version 0.92,...
CVE-2019-20009: Allocation of Resources Without Limits or Throttling
An issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted excessive memory allocation in dwgdecodeSPLINEprivate in dwg.spec...
CVE-2019-20013: Allocation of Resources Without Limits or Throttling
An issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted excessive memory allocation in decode3dsolid in dwg.spec...