Vulnerabilities > GNU > Libredwg > 0.4.799

DATE CVE VULNERABILITY TITLE RISK
2019-12-27 CVE-2019-20009 Allocation of Resources Without Limits or Throttling vulnerability in multiple products
An issue was discovered in GNU LibreDWG before 0.93.
network
gnu opensuse CWE-770
4.3
2018-07-23 CVE-2018-14524 Double Free vulnerability in GNU Libredwg
dwg_decode_eed in decode.c in GNU LibreDWG before 0.6 leads to a double free (in dwg_free_eed in free.c) because it does not properly manage the obj->eed value after a free occurs.
network
gnu CWE-415
4.3
2018-07-20 CVE-2018-14471 NULL Pointer Dereference vulnerability in GNU Libredwg
dwg_obj_block_control_get_block_headers in dwg_api.c in GNU LibreDWG 0.5.1048 allows remote attackers to cause a denial of service (NULL pointer dereference and SEGV) via a crafted dwg file.
network
gnu CWE-476
4.3
2018-07-20 CVE-2018-14443 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in GNU Libredwg
get_first_owned_object in dwg.c in GNU LibreDWG 0.5.1036 allows remote attackers to cause a denial of service (SEGV).
network
gnu CWE-119
4.3