RSS   Podatności dla 'Libredwg'   RSS

2021-12-02
 
CVE-2021-28236

CWE-476
 

 
LibreDWG v0.12.3 was discovered to contain a NULL pointer dereference via out_dxfb.c.

 
 
CVE-2021-28237

CWE-787
 

 
LibreDWG v0.12.3 was discovered to contain a heap-buffer overflow via decode_preR13.

 
2021-09-20
 
CVE-2021-39521

CWE-476
 

 
An issue was discovered in libredwg through v0.10.1.3751. A NULL pointer dereference exists in the function bit_read_BB() located in bits.c. It allows an attacker to cause Denial of Service.

 
 
CVE-2021-39522

CWE-787
 

 
An issue was discovered in libredwg through v0.10.1.3751. bit_wcs2len() in bits.c has a heap-based buffer overflow.

 
 
CVE-2021-39523

CWE-476
 

 
An issue was discovered in libredwg through v0.10.1.3751. A NULL pointer dereference exists in the function check_POLYLINE_handles() located in decode.c. It allows an attacker to cause Denial of Service.

 
 
CVE-2021-39525

CWE-787
 

 
An issue was discovered in libredwg through v0.10.1.3751. bit_read_fixed() in bits.c has a heap-based buffer overflow.

 
 
CVE-2021-39527

CWE-787
 

 
An issue was discovered in libredwg through v0.10.1.3751. appinfo_private() in decode.c has a heap-based buffer overflow.

 
 
CVE-2021-39528

CWE-415
 

 
An issue was discovered in libredwg through v0.10.1.3751. dwg_free_MATERIAL_private() in dwg.spec has a double free.

 
 
CVE-2021-39530

CWE-787
 

 
An issue was discovered in libredwg through v0.10.1.3751. bit_wcs2nlen() in bits.c has a heap-based buffer overflow.

 
2021-07-01
 
CVE-2021-36080

CWE-415
 

 
GNU LibreDWG 0.12.3.4163 through 0.12.3.4191 has a double-free in bit_chain_free (called from dwg_encode_MTEXT and dwg_encode_add_object).

 


Copyright 2021, cxsecurity.com

 

Back to Top