CVE-2019-9776: NULL Pointer Dereference

An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in the function dwgdxfLTYPE at dwg.spec later than CVE-2019-9779...

GNU LibreDWG Buffer Overflow Vulnerability (CNVD-2019-12552)

GNU LibreDWG is a GNU Project C library for working with DWG files. A buffer overflow vulnerability exists in the 'bitreadB' function of the bits.c file in GNU LibreDWG version 0.7 and 0.7.1645. An attacker could exploit this vulnerability to cause a denial of service or disclose information...

PT-2019-19864

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions 0.7 through 0.7.1645 Description A heap-based buffer overflow issue exists in the dwg decode eed data function at decode.c for the z dimension. Recommendations For GNU LibreDWG versions 0.7 through 0.7.1645, consider...

GNU LibreDWG Buffer Overflow Vulnerability (CNVD-2019-12557)

GNU LibreDWG is a GNU Project C library for working with DWG files. A buffer overflow vulnerability exists in the 'dwgdxfBLOCKCONTROL' function of the dwg.spec file in GNU LibreDWG version 0.7 and 0.7.1645. An attacker could exploit this vulnerability to cause a denial of service or disclose...

PT-2019-19866

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions 0.7 through 0.7.1645 Description An issue was discovered in the function dwg dxf BLOCK CONTROL at dwg.spec, which results in an out-of-bounds read. Recommendations For GNU LibreDWG versions 0.7 through 0.7.1645, consider...

GNU LibreDWG Zero Pointer Vulnerability

GNU LibreDWG is a C language library developed by the GNU Project for working with DWG files. A security vulnerability exists in the 'dwgobjblockcontrolgetblockheaders' function in the dwgapi.c file in GNU LibreDWG version 0.5.1048. A remote attacker can exploit this vulnerability to cause a deni...

GNU LibreDWG Denial of Service Vulnerability

GNU LibreDWG is a C language library developed by the GNU Project for working with DWG files. A denial of service vulnerability exists in the 'getfirstownedobject' function of the dwg.c file in GNU LibreDWG version 0.5.1036. A remote attacker could exploit this vulnerability to cause a denial of...

Double free

dwgdecodeeed in decode.c in GNU LibreDWG before 0.6 leads to a double free in dwgfreeeed in free.c because it does not properly manage the obj-eed value after a free occurs...

CVE-2018-14524

dwgdecodeeed in decode.c in GNU LibreDWG before 0.6 leads to a double free in dwgfreeeed in free.c because it does not properly manage the obj-eed value after a free occurs...

CVE-2018-14524

dwgdecodeeed in decode.c in GNU LibreDWG before 0.6 leads to a double free in dwgfreeeed in free.c because it does not properly manage the obj-eed value after a free occurs...

CVE-2018-14524

dwgdecodeeed in decode.c in GNU LibreDWG before 0.6 leads to a double free in dwgfreeeed in free.c because it does not properly manage the obj-eed value after a free occurs...

CVE-2018-14524

dwgdecodeeed in decode.c in GNU LibreDWG before 0.6 leads to a double free in dwgfreeeed in free.c because it does not properly manage the obj-eed value after a free occurs...

CVE-2018-14524

CVE-2018-14524 affects GNU LibreDWG prior to 0.6, with a double-free in dwg_free_eed due to improper management of obj->eed after free during dwg_decode_eed. Affected component: LibreDWG (C library for DWG handling). Root cause: freeing obj->eed without proper reinitialization/handling. Imp...

CVE-2018-14524: Double Free

dwgdecodeeed in decode.c in GNU LibreDWG before 0.6 leads to a double free in dwgfreeeed in free.c because it does not properly manage the obj-eed value after a free occurs...

PT-2018-12565

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions prior to 0.6 Description The issue arises from improper management of the obj-eed value after a free occurs in the dwg decode eed function in decode.c, leading to a double free in the dwg free eed function in free.c...

CVE-2018-14471

dwgobjblockcontrolgetblockheaders in dwgapi.c in GNU LibreDWG 0.5.1048 allows remote attackers to cause a denial of service NULL pointer dereference and SEGV via a crafted dwg file...

CVE-2018-14471

dwgobjblockcontrolgetblockheaders in dwgapi.c in GNU LibreDWG 0.5.1048 allows remote attackers to cause a denial of service NULL pointer dereference and SEGV via a crafted dwg file...

CVE-2018-14471

dwgobjblockcontrolgetblockheaders in dwgapi.c in GNU LibreDWG 0.5.1048 allows remote attackers to cause a denial of service NULL pointer dereference and SEGV via a crafted dwg file...

CVE-2018-14471

CVE-2018-14471 affects GNU LibreDWG 0.5.1048, where dwg_obj_block_control_get_block_headers (dwg_api.c) can be triggered by a crafted DWG file to cause a denial of service via a NULL pointer dereference/SEGV. The issue is corroborated across multiple issuances (e.g., Red Hat, SUSE, CNVD, OSV, NVD...

CVE-2018-14471

dwgobjblockcontrolgetblockheaders in dwgapi.c in GNU LibreDWG 0.5.1048 allows remote attackers to cause a denial of service NULL pointer dereference and SEGV via a crafted dwg file...