1389 matches found
PT-2019-19866
Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions 0.7 through 0.7.1645 Description An issue was discovered in the function dwg dxf BLOCK CONTROL at dwg.spec, which results in an out-of-bounds read. Recommendations For GNU LibreDWG versions 0.7 through 0.7.1645, consider...
CVE-2019-9774: Out-of-bounds Read
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is an out-of-bounds read in the function bitreadB at bits.c...
PT-2019-19865
Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions 0.7 through 0.7.1645 Description An issue was discovered in the function bit read B at bits.c, which results in an out-of-bounds read. Recommendations For GNU LibreDWG versions 0.7 through 0.7.1645, consider restricting...
PT-2019-19868
Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions 0.7 through 0.7.1645 Description A heap-based buffer over-read issue was found in the dxf header write function at header variables dxf.spec. Recommendations For GNU LibreDWG versions 0.7 through 0.7.1645, consider...
PT-2019-19869
Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions 0.7 through 0.7.1645 Description A heap-based buffer over-read issue exists in the dwg dxf LTYPE function at dwg.spec. Recommendations For GNU LibreDWG versions 0.7 through 0.7.1645, consider disabling the dwg dxf LTYPE...
GNU LibreDWG Null Pointer Dereference Vulnerability (CNVD-2019-12549)
GNU LibreDWG is a GNU Project C library for working with DWG files. A null pointer back-reference vulnerability exists in the 'bitconvertTU' function of the bits.c file in GNU LibreDWG version 0.7 and 0.7.1645. An attacker could exploit this vulnerability to cause a denial of service...
PT-2019-19870
Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions 0.7 through 0.7.1645 Description An issue was discovered in GNU LibreDWG. There is a NULL pointer dereference in the function dwg dxf LTYPE at dwg.spec. Recommendations For GNU LibreDWG versions 0.7 through 0.7.1645, as a...
GNU LibreDWG Buffer Overflow Vulnerability (CNVD-2019-12557)
GNU LibreDWG is a GNU Project C library for working with DWG files. A buffer overflow vulnerability exists in the 'dwgdxfBLOCKCONTROL' function of the dwg.spec file in GNU LibreDWG version 0.7 and 0.7.1645. An attacker could exploit this vulnerability to cause a denial of service or disclose...
PT-2019-19862
Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions 0.7 through 0.7.1645 Description An issue was discovered in GNU LibreDWG. There is a NULL pointer dereference in the function bit convert TU at bits.c. Recommendations For GNU LibreDWG versions 0.7 through 0.7.1645, as a...
PT-2019-19861
Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions 0.7 through 0.7.1645 Description A heap-based buffer overflow issue exists in the function dwg decode eed data at decode.c, specifically affecting the y dimension. Recommendations For GNU LibreDWG versions 0.7 through...
CVE-2019-9773: Out-of-bounds Write
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer overflow in the function dwgdecodeeeddata at decode.c for the z dimension...
CVE-2019-9777: Out-of-bounds Read
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer over-read in the function dxfheaderwrite at headervariablesdxf.spec...
PT-2019-19863
Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions 0.7 through 0.7.1645 Description An issue was discovered in GNU LibreDWG. There is a NULL pointer dereference in the function dwg dxf LEADER at dwg.spec. Recommendations For GNU LibreDWG versions 0.7 through 0.7.1645,...
GNU LibreDWG Heap Buffer Overflow Vulnerability
GNU LibreDWG is a GNU Project C library for working with DWG files. A buffer overflow vulnerability exists in the 'dwgdecodeeeddata' function of the decode.c file in GNU LibreDWG version 0.7 and version 0.7.1645. An attacker could exploit this vulnerability to cause a denial of service...
CVE-2019-9772: NULL Pointer Dereference
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in the function dwgdxfLEADER at dwg.spec...
GNU LibreDWG null pointer back-reference vulnerability (CNVD-2019-12558)
GNU LibreDWG is a GNU Project C library for working with DWG files. A null pointer back-reference vulnerability exists in the 'dwgdxfLTYPE' function of the dwg.spec file in GNU LibreDWG version 0.7 and 0.7.1645. An attacker could exploit this vulnerability to cause a denial of service...
CVE-2019-9779: NULL Pointer Dereference
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in the function dwgdxfLTYPE at dwg.spec earlier than CVE-2019-9776...
CVE-2019-9771: NULL Pointer Dereference
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in the function bitconvertTU at bits.c...