GNU LibreDWG Null Pointer Dereference Vulnerability (CNVD-2020-04062)

LibreDWG is a free C library for reading and writing DWG files. A null pointer dereference vulnerability exists in getnextownedentity in dwg.c in GNU LibreDWG 0.9.3.2564. An attacker can exploit this vulnerability to cause a denial of service...

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2020-04064)

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in readpagesmap in decoder2007.c in GNU LibreDWG 0.9.3.2564. An attacker can exploit this vulnerability to cause a buffer overflow or heap overflow, among other things...

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2020-04067)

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in bitsearchsentinel in bits.c in GNU LibreDWG 0.9.3.2564. An attacker can exploit this vulnerability to cause a buffer overflow or heap overflow, among other things...

PT-2020-19179 · Gnu +1 · Gnu Libredwg +1

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.9.3.2564 Description: The issue is related to a heap-based buffer over-read in the copy compressed bytes function located in decode r2007.c. Recommendations: For GNU LibreDWG version 0.9.3.2564, consider updating to a...