CveMateVulnerability intelligence

Gnu Libredwg vulnerabilities, page 3

101 vulnerabilities

Known vulnerabilities in Gnu Libredwg, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CVE-2020-15807gnulibredwg6y ago17-07-2020 15:35

GNU LibreDWG before 0.11 allows NULL pointer dereferences via crafted input files.CVE-2020-6615gnulibredwg+26y ago08-01-2020 20:43

GNU LibreDWG 0.9.3.2564 has an invalid pointer dereference in dwg_dynapi_entity_value in dynapi.c (dynapi.c is generated by gen-dynapi.pl).CVE-2020-6612gnulibredwg+26y ago08-01-2020 20:43

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in copy_compressed_bytes in decode_r2007.c.CVE-2020-6609gnulibredwg+26y ago08-01-2020 20:44

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in read_pages_map in decode_r2007.c.CVE-2020-6611gnulibredwg+26y ago08-01-2020 20:43

GNU LibreDWG 0.9.3.2564 has a NULL pointer dereference in get_next_owned_entity in dwg.c.CVE-2020-6614gnulibredwg+26y ago08-01-2020 20:43

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bfr_read in decode.c.CVE-2020-6610gnulibredwg+26y ago08-01-2020 20:43

GNU LibreDWG 0.9.3.2564 has an attempted excessive memory allocation in read_sections_map in decode_r2007.c.CVE-2020-6613gnulibredwg+26y ago08-01-2020 20:43

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bit_search_sentinel in bits.c.CVE-2020-23861gnulibredwg5y ago18-05-2021 15:02

A heap-based buffer overflow vulnerability exists in LibreDWG 0.10.1 via the read_system_page function at libredwg-0.10.1/src/decode_r2007.c:666:5, which causes a denial of service by submitting a dwg file.CVE-2022-45332gnulibredwg3y ago30-11-2022 00:00

LibreDWG v0.12.4.4643 was discovered to contain a heap buffer overflow via the function decode_preR13_section_hdr at decode_r11.c.CVE-2022-35164gnulibredwg+14y ago18-08-2022 04:49

LibreDWG v0.12.4.4608 & commit f2dea29 was discovered to contain a heap use-after-free via bit_copy_chain.CVE-2022-33028gnulibredwg4y ago22-06-2022 13:33

LibreDWG v0.12.4.4608 was discovered to contain a heap buffer overflow via the function dwg_add_object at decode.c.CVE-2022-33034gnulibredwg4y ago22-06-2022 13:33

LibreDWG v0.12.4.4608 was discovered to contain a stack overflow via the function copy_bytes at decode_r2007.c.CVE-2022-33032gnulibredwg4y ago22-06-2022 13:33

LibreDWG v0.12.4.4608 was discovered to contain a heap-buffer-overflow via the function decode_preR13_section_hdr at decode_r11.c.CVE-2022-33033gnulibredwg4y ago22-06-2022 13:33

LibreDWG v0.12.4.4608 was discovered to contain a double-free via the function dwg_read_file at dwg.c.CVE-2022-33024gnulibredwg4y ago22-06-2022 13:33

There is an Assertion `int decode_preR13_entities(BITCODE_RL, BITCODE_RL, unsigned int, BITCODE_RL, BITCODE_RL, Bit_Chain *, Dwg_Data *' failed at dwg2dxf: decode.c:5801 in libredwg v0.12.4.4608.CVE-2022-33027gnulibredwg4y ago22-06-2022 13:33

LibreDWG v0.12.4.4608 was discovered to contain a heap-use-after-free via the function dwg_add_handleref at dwg.c.CVE-2022-33026gnulibredwg4y ago22-06-2022 13:33

LibreDWG v0.12.4.4608 was discovered to contain a heap buffer overflow via the function bit_calc_CRC at bits.c.CVE-2022-33025gnulibredwg4y ago22-06-2022 13:33

LibreDWG v0.12.4.4608 was discovered to contain a heap-use-after-free via the function decode_preR13_section at decode_r11.c.CVE-2019-20914gnulibredwg6y ago16-07-2020 17:46

An issue was discovered in GNU LibreDWG through 0.9.3. There is a NULL pointer dereference in the function dwg_encode_common_entity_handle_data in common_entity_handle_data.spec.