Gnu Libredwg vulnerabilities, page 4
101 vulnerabilities
Known vulnerabilities in Gnu Libredwg, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2019-20010gnulibredwg+2
EPSS score1.43%
An issue was discovered in GNU LibreDWG 0.92. There is a use-after-free in resolve_objectref_vector in decode.c.CVE-2019-20012gnulibredwg+2EPSS score1.36%
An issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive memory allocation in dwg_decode_HATCH_private in dwg.spec.CVE-2019-20915gnulibredwgEPSS score1.24%
An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in bit_write_TF in bits.c.CVE-2019-20912gnulibredwgEPSS score1.32%
An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a stack overflow in bits.c, possibly related to bit_read_TF.CVE-2019-20011gnulibredwg+2EPSS score1.47%
An issue was discovered in GNU LibreDWG 0.92. There is a heap-based buffer over-read in decode_R13_R2000 in decode.c.CVE-2019-20009gnulibredwg+2EPSS score1.37%
An issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted excessive memory allocation in dwg_decode_SPLINE_private in dwg.spec.CVE-2019-20910gnulibredwgEPSS score1.24%
An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in decode_R13_R2000 in decode.c, a different vulnerability than CVE-2019-20011.CVE-2019-20015gnulibredwg+2EPSS score1.36%
An issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive memory allocation in dwg_decode_LWPOLYLINE_private in dwg.spec.CVE-2019-20013gnulibredwg+2EPSS score1.37%
An issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted excessive memory allocation in decode_3dsolid in dwg.spec.CVE-2019-20913gnulibredwgEPSS score1.24%
An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in dwg_encode_entity in common_entity_data.spec.CVE-2019-20909gnulibredwgEPSS score1.62%
An issue was discovered in GNU LibreDWG through 0.9.3. There is a NULL pointer dereference in the function dwg_encode_LWPOLYLINE in dwg.spec.CVE-2019-20911gnulibredwgEPSS score1.02%
An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to denial of service in bit_calc_CRC in bits.c, related to a for loop.CVE-2019-20014gnulibredwg+2EPSS score1.49%
An issue was discovered in GNU LibreDWG before 0.93. There is a double-free in dwg_free in free.c.CVE-2019-9774gnulibredwg+2EPSS score2.97%
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is an out-of-bounds read in the function bit_read_B at bits.c.CVE-2019-9779gnulibredwg+2EPSS score2.77%
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in the function dwg_dxf_LTYPE at dwg.spec (earlier than CVE-2019-9776).CVE-2019-9776gnulibredwg+2EPSS score2.77%
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in the function dwg_dxf_LTYPE at dwg.spec (later than CVE-2019-9779).CVE-2019-9770gnulibredwg+2EPSS score2.91%
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer overflow in the function dwg_decode_eed_data at decode.c for the y dimension.CVE-2019-9772gnulibredwg+2EPSS score2.77%
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in the function dwg_dxf_LEADER at dwg.spec.CVE-2019-9777gnulibredwg+2EPSS score2.77%
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer over-read in the function dxf_header_write at header_variables_dxf.spec.CVE-2019-9773gnulibredwg+2EPSS score2.91%
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer overflow in the function dwg_decode_eed_data at decode.c for the z dimension.