945 matches found
GNU LibreDWG 缓冲区错误漏洞
GNU LibreDWG is a C language library for working with DWG files from the US GNU community. A buffer error vulnerability exists in GNU LibreDWG version 0.12.5, which stems from the function bitwcs2nlen containing a heap buffer overflow vulnerability...
CVE-2023-36272
LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bitutf8toTU at bits.c...
CVE-2023-36273
LibreDWG v0.12.5 was discovered to contain a heap buffer overflow via the function bitcalcCRC at bits.c...
libredwg 缓冲区错误漏洞
libredwg is a free implementation of the DWG file format. A buffer error vulnerability exists in libredwg version 0.12.5, which stems from the function bitutf8toTU containing a heap buffer overflow vulnerability...
CVE-2023-36271
LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bitwcs2nlen at bits.c...
CVE-2023-36274
LibreDWG v0.12.5 was discovered to contain a heap buffer overflow via the function bitwriteTF at bits.c...
CVE-2023-36271
LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bitwcs2nlen at bits.c...
CVE-2023-36272
LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bitutf8toTU at bits.c...
CVE-2023-36271
CVE-2023-36271 affects LibreDWG, with a heap buffer overflow in the function bit_wcs2nlen implemented in bits.c, impacting versions from 0.10 up to 0.12.5 . The root cause is a memory safety issue in the bit_wcs2nlen routine that can overflow a heap buffer. Impact is described as a high-severity ...
PT-2023-25506 · Libredwg · Libredwg
Name of the Vulnerable Software and Affected Versions: LibreDWG version 0.12.5 Description: A heap buffer overflow issue was discovered in the function bit utf8 to TU at bits.c. Recommendations: For LibreDWG version 0.12.5, at the moment, there is no information about a newer version that contain...
PT-2023-25508 · Libredwg · Libredwg
Name of the Vulnerable Software and Affected Versions: LibreDWG version 0.12.5 Description: A heap buffer overflow issue was discovered in LibreDWG via the bit write TF function at bits.c. Recommendations: For LibreDWG version 0.12.5, consider disabling the bit write TF function as a temporary...
CVE-2023-36274
LibreDWG vulnerability CVE-2023-36274 affects LibreDWG v0.11 through v0.12.5, caused by a heap buffer overflow in the bit_write_TF function (bits.c). Impact details in the sources indicate such overflow could lead to memory corruption. Public-fix references show OpenSUSE backport/update to 0.12.5...
libredwg 缓冲区错误漏洞
libredwg is a free implementation of the DWG file format. A buffer error vulnerability exists in libredwg version 0.12.5, which stems from the bitwriteTF function containing a heap buffer overflow vulnerability...
CVE-2023-36274
LibreDWG v0.11 to v0.12.5 was discovered to contain a heap buffer overflow via the function bitwriteTF at bits.c...
CVE-2023-36274
LibreDWG v0.11 to v0.12.5 was discovered to contain a heap buffer overflow via the function bitwriteTF at bits.c...
GNU LibreDWG 缓冲区错误漏洞
GNU LibreDWG is a C language library for working with DWG files from the US GNU community. A security vulnerability exists in GNU LibreDWG version 0.12.5, which stems from the function bitcalcCRC containing a heap buffer overflow vulnerability...
CVE-2023-36273
CVE-2023-36273 affects LibreDWG in version 0.12.5, where a heap buffer overflow is triggered by the function bit_calc_CRC in bits.c. This is confirmed across multiple sources (NVD entry and OSS/openSUSE advisories) and is addressed by updating to LibreDWG v0.12.5.5907, which fixes the heap buffer...
CVE-2023-36272
CVE-2023-36272 affects LibreDWG (v0.10–v0.12.5); the root cause is a heap buffer overflow in the function bit_utf8_to_TU in bits.c. Impact is high (CVE 3.1 score 8.8) with potential in-network exploitation supposing no user interaction is required by the CVE advisory. Public materials in connecte...