Vulnerabilities > CVE-2018-14524 - Double Free vulnerability in GNU Libredwg

047910
CVSS 6.5 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
gnu
CWE-415
NVD
Published: 2018-07-23
Updated: 2018-08-20

Summary

dwg_decode_eed in decode.c in GNU LibreDWG before 0.6 leads to a double free (in dwg_free_eed in free.c) because it does not properly manage the obj->eed value after a free occurs.

Vulnerable Configurations

Part Description Count
Application
Gnu
140

Common Weakness Enumeration (CWE)

Statements

contributorReini Urban
lastmodified2018-08-13
organizationlibredwg
statementThis issue has been resolved in the latest release of libredwg-0.6. See https://savannah.gnu.org/forum/forum.php?forum_id=9211.

References