945 matches found
CVE-2019-9770
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer overflow in the function dwgdecodeeeddata at decode.c for the y dimension...
CVE-2019-9776
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in the function dwgdxfLTYPE at dwg.spec later than CVE-2019-9779...
CVE-2019-9775
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is an out-of-bounds read in the function dwgdxfBLOCKCONTROL at dwg.spec...
CVE-2019-9774
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is an out-of-bounds read in the function bitreadB at bits.c...
CVE-2019-9771
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in the function bitconvertTU at bits.c...
CVE-2019-9776
CVE-2019-9776 is a vulnerability in GNU LibreDWG (LibreDWG/libredwg) where a NULL pointer dereference occurs in the DWF/DXF handling path (dwg_dxf_LTYPE). Publicly discussed fixes are delivered via libredwg updates in openSUSE/SLE backports: release 0.9.3 (and related 0.9.x series) includes fixes...
CVE-2019-9773
CVE-2019-9773 affects GNU LibreDWG, with a heap-based buffer overflow in dwg_decode_eed_data (z dimension) in versions 0.7 and 0.7.1645. Connected advisories show openSUSE/SUSE patches and releases (e.g., libredwg 0.9.3) addressing this family of issues, including corrections for overflows and re...
CVE-2019-9775
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is an out-of-bounds read in the function dwgdxfBLOCKCONTROL at dwg.spec...
CVE-2019-9775
CVE-2019-9775 affects GNU LibreDWG 0.7 and 0.7.1645 and describes an out-of-bounds read in the function dwg_dxf_BLOCK_CONTROL at dwg.spec. The connected advisories confirm this vulnerability is addressed in newer LibreDWG releases (e.g., libredwg 0.9.x series; OpenSUSE/SUSE advisories reference 0...
CVE-2019-9773
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer overflow in the function dwgdecodeeeddata at decode.c for the z dimension...
CVE-2019-9774
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is an out-of-bounds read in the function bitreadB at bits.c...
CVE-2019-9777
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer over-read in the function dxfheaderwrite at headervariablesdxf.spec...
CVE-2019-9771
The CVE-2019-9771 issue affects GNU LibreDWG 0.7 and 0.7.1645, caused by a NULL pointer dereference in bit_convert_TU (bits.c). Public docs show remediation in libredwg releases up to 0.9.3, with OpenSUSE/SUSE advisories (e.g., openSUSE-SU-2020:0068-1/0095-1) noting fixes that address null pointe...
CVE-2019-9774
CVE-2019-9774 concerns an out-of-bounds read in GNU LibreDWG 0.7 and 0.7.1645, specifically in bit_read_B (bits.c). Connected documents show downstream fixes in libredwg/OpenSUSE releases, notably a 0.9.x line with multiple CVEs fixed (e.g., CVE-2019-9774 and related issues) and security updates ...
CVE-2019-9771
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in the function bitconvertTU at bits.c...
CVE-2019-9777
CVE-2019-9777 affects GNU LibreDWG 0.7 and 0.7.1645 and is a heap-based buffer over-read in dxf_header_write (header_variables_dxf.spec). Connected documents link this CVE to the libredwg project and confirm fixes in later releases; openSUSE/SUSE advisories state libredwg 0.9.3 (and related updat...
CVE-2019-9779
CVE-2019-9779 affects GNU LibreDWG 0.7 and 0.7.1645, due to a NULL pointer dereference in the function dwg_dxf_LTYPE (dwg.spec). The issue is mitigated by upgrading to the libredwg release series that fixes NULL pointer dereferences, with references showing the fix in the 0.9.x line (notably 0.9....
CVE-2019-9772
CVE-2019-9772 affects GNU LibreDWG up to version 0.7 (patches referenced in LibreDWG 0.9.x series). The vulnerability is a NULL pointer dereference in the function dwg_dxf_LEADER in dwg.spec, as described in the CVE entry. Publicly discussed openSUSE/SUSE advisories (openSUSE-SU-2020:0068-1/0068-...
CVE-2019-9778
CVE-2019-9778 affects GNU LibreDWG 0.7 and 0.7.1645, with a heap-based buffer over-read in the function dwg_dxf_LTYPE in dwg.spec. Public records (SUSE/openSUSE and OSV entries) indicate that fixes were delivered in libredwg releases up to 0.9.3 and related updates, addressing multiple overflow/n...