CVE-2020-21813

Summary: CVE-2020-21813 affects GNU LibreDWG, specifically version 0.10.2641, with a heap-based buffer overflow exploitable via the function path output_TEXT in dwg2SVG.c:114. What is affected: LibreDWG 0.10.2641 (GNU LibreDWG). Root cause (as stated): heap-based buffer overflow in output_TEXT at...

GNU LibreDWG 缓冲区错误漏洞

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10. An attacker can exploit this vulnerability by reading2004sectionrevhistory ... /... /src/decode.c:3051 to exploit the vulnerability and cause a heap buffer...

GNU LibreDWG 缓冲区错误漏洞

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10. An attacker can exploit this vulnerability via the bitcalcCRC ... /... /src/bits.c:2213 to exploit the vulnerability and cause a heap buffer overflow...

GNU LibreDWG 代码问题漏洞

LibreDWG is a free C library for reading and writing DWG files. A null pointer dereference vulnerability exists in GNU LibreDWG version 0.10.2641. An attacker can pass the outputTEXT ... /... /programs/dwg2SVG.c:114 to exploit the vulnerability and cause the application to crash...

PT-2021-10683

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists in the read 2004 section appinfo function, located in the decode.c file. This issue can be exploited via the read 2004 section appinfo function. Recommendations:...

PT-2021-10686

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists via the bit read B function in the bits.c file. This could potentially allow for exploitation. Recommendations: For GNU LibreDWG version 0.10, consider restricti...

GNU LibreDWG 缓冲区错误漏洞

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10.2641. An attacker can exploit this vulnerability via htmlescape ... /... /programs/escape.c:48 to exploit the vulnerability and cause a heap buffer overflow...

GNU LibreDWG 缓冲区错误漏洞

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10. An attacker can exploit this vulnerability via bitreadRC ... /... /src/bits.c:318 to cause a heap buffer overflow...

PT-2021-10688

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists in GNU LibreDWG. The problem is related to the bit read RC function in the bits.c file. Recommendations: For GNU LibreDWG version 0.10, consider restricting acce...

PT-2021-10684

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: An issue in GNU LibreDWG leads to a memory leak when crafted input is processed by the dwg decode eed function in the decode.c file. Recommendations: For GNU LibreDWG version 0.10, at the moment, there i...

GNU LibreDWG 缓冲区错误漏洞

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10. An attacker can exploit this vulnerability by reading2004sectionclasses ... /... /src/decode.c:2440 to cause a heap buffer overflow...

PT-2021-10679

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists in the read 2004 section classes function, located in the decode.c file. This issue is related to the line 2440 of the decode.c file. Recommendations: For GNU...

PT-2021-10672

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10.2641 Description: A null pointer dereference issue exists, which causes a denial of service, resulting in an application crash. The issue is related to the htmlescape function in the escape.c file. Recommendations: F...

GNU LibreDWG 代码问题漏洞

LibreDWG is a free C library for reading and writing DWG files. A null pointer dereference vulnerability exists in GNU LibreDWG version 0.10. An attacker can read2004compressedsection ... /... /src/decode.c:2337 to exploit the vulnerability and cause a denial of service...

GNU LibreDWG 缓冲区错误漏洞

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10. An attacker can exploit this vulnerability via the bitreadB ... /... /src/bits.c:135 to exploit the vulnerability and cause a heap buffer overflow...

PT-2021-10676

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists in the software. The problem is located in the bit calc CRC function in the bits.c file. Recommendations: For GNU LibreDWG version 0.10, at the moment, there is ...

GNU LibreDWG 缓冲区错误漏洞

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10. An attacker can exploit this vulnerability by reading2004sectionhandles ... /... /src/decode.c:2637 to cause a heap buffer overflow...

PT-2021-10680

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A null pointer dereference issue exists in GNU LibreDWG. This issue is related to the get bmp function in the dwgbmp.c file. Recommendations: For GNU LibreDWG version 0.10, consider avoiding the use of t...

PT-2021-10671

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10.2641 Description: A heap-based buffer overflow issue exists in GNU LibreDWG. The issue is related to the htmlescape function in the escape.c file. Recommendations: For GNU LibreDWG version 0.10.2641, at the moment,...

PT-2021-10675

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists, which can be triggered via the read 2004 compressed section function in the decode.c file. Recommendations: For GNU LibreDWG version 0.10, consider applying a...