Lucene search
GnuLibredwg*
4 matches found
CVE-2021-42585
A heap buffer overflow was discovered in copy_compressed_bytes in decode_r2007.c in dwgread before 0.12.4 via a crafted dwg file.
8.8CVSS8.7AI score0.00399EPSS
CVE-2021-42586
A heap buffer overflow was discovered in copy_bytes in decode_r2007.c in dwgread before 0.12.4 via a crafted dwg file.
8.8CVSS8.7AI score0.00399EPSS
CVE-2022-35164
LibreDWG v0.12.4.4608 & commit f2dea29 was discovered to contain a heap use-after-free via bit_copy_chain.
9.8CVSS9.5AI score0.00122EPSS
CVE-2021-45950
LibreDWG 0.12.4.4313 through 0.12.4.4367 has an out-of-bounds write in dwg_free_BLOCK_private (called from dwg_free_BLOCK and dwg_free_object).
6.5CVSS6.5AI score0.00238EPSS