Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Libredwg
(Gnu)Repositories |
Unknown: This might be proprietary software. |
#Vulnerabilities | 87 |
Date | Id | Summary | Products | Score | Patch | Annotated |
---|---|---|---|---|---|---|
2021-07-01 | CVE-2021-36080 | GNU LibreDWG 0.12.3.4163 through 0.12.3.4191 has a double-free in bit_chain_free (called from dwg_encode_MTEXT and dwg_encode_add_object). | Libredwg | 8.8 | ||
2021-05-17 | CVE-2020-21813 | A heap based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via output_TEXT ../../programs/dwg2SVG.c:114. | Libredwg | 7.8 | ||
2021-05-17 | CVE-2020-21831 | A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_section_handles ../../src/decode.c:2637. | Libredwg | 8.8 | ||
2021-05-17 | CVE-2020-21844 | GNU LibreDWG 0.10 is affected by: memcpy-param-overlap. The impact is: execute arbitrary code (remote). The component is: read_2004_section_header ../../src/decode.c:2580. | Libredwg | 8.8 | ||
2021-05-18 | CVE-2020-23861 | A heap-based buffer overflow vulnerability exists in LibreDWG 0.10.1 via the read_system_page function at libredwg-0.10.1/src/decode_r2007.c:666:5, which causes a denial of service by submitting a dwg file. | Libredwg | 5.5 | ||
2021-05-17 | CVE-2020-21814 | A heap based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via htmlwescape ../../programs/escape.c:97. | Libredwg | 8.8 | ||
2021-05-17 | CVE-2020-21815 | A null pointer deference issue exists in GNU LibreDWG 0.10.2641 via output_TEXT ../../programs/dwg2SVG.c:114, which causes a denial of service (application crash). | Libredwg | 6.5 | ||
2021-05-17 | CVE-2020-21816 | A heab based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:46. | Libredwg | 8.8 | ||
2021-05-17 | CVE-2020-21817 | A null pointer dereference issue exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:29. which causes a denial of service (application crash). | Libredwg | 6.5 | ||
2021-05-17 | CVE-2020-21818 | A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:48. | Libredwg | 8.8 |