Lucene search
K

24 matches found

RedhatCVE
RedhatCVE
added 2026/06/16 1:31 p.m.6 views

CVE-2026-6039

A flaw was found in LibreOffice. This vulnerability, a heap buffer overflow, occurs when processing specially crafted DXF Drawing Exchange Format polyline files. An attacker could exploit this by convincing a user to open a malicious DXF file, which may lead to a denial of service DoS due to...

6.9CVSS5.4AI score0.00157EPSS
Exploits0References4
NVD
NVD
added 2026/06/15 6:16 p.m.14 views

CVE-2026-6039

LibreOffice can import drawings in the DXF format used by CAD software. A heap buffer overflow existed when importing a DXF polyline. The point count taken from the file was truncated to a 16-bit value when the point buffer was sized, while the full count was used to fill it, so a polyline whose...

6.9CVSS0.00157EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/06/15 4:21 p.m.9 views

CVE-2026-6039 Heap buffer overflow in DXF polyline import

LibreOffice can import drawings in the DXF format used by CAD software. A heap buffer overflow existed when importing a DXF polyline. The point count taken from the file was truncated to a 16-bit value when the point buffer was sized, while the full count was used to fill it, so a polyline whose...

6.9CVSS5.6AI score0.00157EPSS
Exploits0References1
CVE
CVE
added 2026/06/15 4:21 p.m.13 views

CVE-2026-6039

CVE-2026-6039 affects LibreOffice DXF import: a heap buffer overflow occurs when importing a DXF polyline with a point count that exceeds 16-bit during buffer sizing, while the full count is used to fill the buffer. This mismatch allows writing past the end of the buffer. In fixed versions, such ...

6.9CVSS5.7AI score0.00157EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/06/15 4:21 p.m.32 views

CVE-2026-6039 Heap buffer overflow in DXF polyline import

LibreOffice can import drawings in the DXF format used by CAD software. A heap buffer overflow existed when importing a DXF polyline. The point count taken from the file was truncated to a 16-bit value when the point buffer was sized, while the full count was used to fill it, so a polyline whose...

6.9CVSS0.00157EPSS
Exploits0References1
EUVD
EUVD
added 2026/06/15 4:21 p.m.7 views

EUVD-2026-36734

LibreOffice can import drawings in the DXF format used by CAD software. A heap buffer overflow existed when importing a DXF polyline. The point count taken from the file was truncated to a 16-bit value when the point buffer was sized, while the full count was used to fill it, so a polyline whose...

6.9CVSS5.7AI score0.00157EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/06/15 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-6039

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibreOffice can import drawings in the DXF format used by CAD software. A heap buffer overflow existed when importing a DXF polyline. The point count taken from...

6.9CVSS6.2AI score0.00157EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2018-6227

Malware in sbrugna...

8.8CVSS8.8AI score0.02773EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.51 views

EUVD-2021-21610

Malware in sbrugna...

7.8CVSS7.5AI score0.00349EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/22 8:44 p.m.12 views

CVE-2021-39523

An issue was discovered in libredwg through v0.10.1.3751. A NULL pointer dereference exists in the function checkPOLYLINEhandles located in decode.c. It allows an attacker to cause Denial of Service...

6.5CVSS6.6AI score0.00829EPSS
Exploits1References1
OSV
OSV
added 2024/05/07 11:15 p.m.2 views

CVE-2021-34963

Foxit PDF Editor PolyLine Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS6.2AI score0.00349EPSS
Exploits0References2
NVD
NVD
added 2024/05/07 11:15 p.m.43 views

CVE-2021-34963

Foxit PDF Editor PolyLine Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS8AI score0.00349EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/05/07 10:54 p.m.14 views

CVE-2021-34963 Foxit PDF Editor PolyLine Annotation Use-After-Free Remote Code Execution Vulnerability

Foxit PDF Editor PolyLine Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS7.4AI score0.00349EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/05/07 10:54 p.m.52 views

CVE-2021-34963 Foxit PDF Editor PolyLine Annotation Use-After-Free Remote Code Execution Vulnerability

Foxit PDF Editor PolyLine Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS8.2AI score0.00349EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 4:5 a.m.2 views

SUSE CVE-2019-20015

An issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive memory allocation in dwgdecodeLWPOLYLINEprivate in dwg.spec...

6.5CVSS6.4AI score0.01358EPSS
Exploits1References5
SUSE CVE
SUSE CVE
added 2023/02/15 3:46 a.m.3 views

SUSE CVE-2021-21897

A code execution vulnerability exists in the DLDxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0. A specially-crafted .dxf file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS9AI score0.02885EPSS
Exploits1References4
SUSE CVE
SUSE CVE
added 2023/02/15 3:38 a.m.4 views

SUSE CVE-2021-39523

An issue was discovered in libredwg through v0.10.1.3751. A NULL pointer dereference exists in the function checkPOLYLINEhandles located in decode.c. It allows an attacker to cause Denial of Service...

6.5CVSS6.5AI score0.00829EPSS
Exploits1References3
CNNVD
CNNVD
added 2021/09/20 12:0 a.m.5 views

libredwg 代码问题漏洞

LibreDWG is a free C library for reading and writing DWG files. a null pointer dereference vulnerability exists in the checkPOLYLINEhandles function in decode.c in LibreDWG version 0.10.1.3751. An attacker could exploit this vulnerability to cause a denial of service...

6.5CVSS6.6AI score0.00829EPSS
Exploits1References2
CNVD
CNVD
added 2020/07/22 12:0 a.m.3 views

GNU LibreDWG Resource Management Error Vulnerability

GNU LibreDWG is a GNU Project C library for working with DWG files. A resource management error vulnerability exists in the 'dwgencodeLWPOLYLINE' function of the dwg.spec file in GNU LibreDWG version 0.9.3 and earlier. The vulnerability stems from mismanagement of system resources e.g., memory,...

7.5CVSS7AI score0.01619EPSS
Exploits1References1
OSV
OSV
added 2018/07/31 8:29 p.m.4 views

CVE-2018-14305

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS6.1AI score
Exploits0References2
Rows per page
Query Builder