CVE-2021-39530

An issue was discovered in libredwg through v0.10.1.3751. bitwcs2nlen in bits.c has a heap-based buffer overflow...

CVE-2021-39525

An issue was discovered in libredwg through v0.10.1.3751. bitreadfixed in bits.c has a heap-based buffer overflow...

CVE-2021-39525

An issue was discovered in libredwg through v0.10.1.3751. bitreadfixed in bits.c has a heap-based buffer overflow...

CVE-2021-39522

An issue was discovered in libredwg through v0.10.1.3751. bitwcs2len in bits.c has a heap-based buffer overflow...

CVE-2021-39523

An issue was discovered in libredwg through v0.10.1.3751. A NULL pointer dereference exists in the function checkPOLYLINEhandles located in decode.c. It allows an attacker to cause Denial of Service...

CVE-2021-39521

An issue was discovered in libredwg through v0.10.1.3751. A NULL pointer dereference exists in the function bitreadBB located in bits.c. It allows an attacker to cause Denial of Service...

CVE-2021-39522

An issue was discovered in libredwg through v0.10.1.3751. bitwcs2len in bits.c has a heap-based buffer overflow...

CVE-2021-39521

An issue was discovered in libredwg through v0.10.1.3751. A NULL pointer dereference exists in the function bitreadBB located in bits.c. It allows an attacker to cause Denial of Service...

CVE-2021-39523

An issue was discovered in libredwg through v0.10.1.3751. A NULL pointer dereference exists in the function checkPOLYLINEhandles located in decode.c. It allows an attacker to cause Denial of Service...

Heap overflow

An issue was discovered in libredwg through v0.10.1.3751. bitwcs2nlen in bits.c has a heap-based buffer overflow...

CVE-2021-39528

An issue was discovered in libredwg through v0.10.1.3751. dwgfreeMATERIALprivate in dwg.spec has a double free...

CVE-2021-39525

An issue was discovered in libredwg through v0.10.1.3751. bitreadfixed in bits.c has a heap-based buffer overflow...

Heap overflow

An issue was discovered in libredwg through v0.10.1.3751. bitreadfixed in bits.c has a heap-based buffer overflow...

Null pointer dereference

An issue was discovered in libredwg through v0.10.1.3751. A NULL pointer dereference exists in the function checkPOLYLINEhandles located in decode.c. It allows an attacker to cause Denial of Service...

Double free

An issue was discovered in libredwg through v0.10.1.3751. dwgfreeMATERIALprivate in dwg.spec has a double free...

Heap overflow

An issue was discovered in libredwg through v0.10.1.3751. bitwcs2len in bits.c has a heap-based buffer overflow...

Heap overflow

An issue was discovered in libredwg through v0.10.1.3751. appinfoprivate in decode.c has a heap-based buffer overflow...

CVE-2021-39525

Summary: CVE-2021-39525 affects libredwg up to v0.10.1.3751, where bit_read_fixed() in bits.c has a heap-based buffer overflow. The vulnerability is documented with CVSS v3.1 score 8.8 (HIGH) and CVSS v2.0 score 6.8 (MEDIUM) indicating network access, no authentication, and partial impact on conf...

CVE-2021-39525

An issue was discovered in libredwg through v0.10.1.3751. bitreadfixed in bits.c has a heap-based buffer overflow...

CVE-2021-39523

The CVE-2021-39523 entry affects the LibreDWG library (v0.10.1.3751 and earlier). A NULL pointer dereference in decode.c::check_POLYLINE_handles() is the root cause, enabling an attacker to cause a Denial of Service. The vulnerability is documented across multiple sources (NVD/SUSE/etc.), but no ...