Vulnerabilities > GNU > Libredwg

DATE CVE VULNERABILITY TITLE RISK
2021-12-02 CVE-2021-28237 Out-of-bounds Write vulnerability in GNU Libredwg 0.12.3
LibreDWG v0.12.3 was discovered to contain a heap-buffer overflow via decode_preR13.
network
low complexity
gnu CWE-787
critical
9.8
2021-09-20 CVE-2021-39521 NULL Pointer Dereference vulnerability in GNU Libredwg
An issue was discovered in libredwg through v0.10.1.3751.
network
low complexity
gnu CWE-476
6.5
2021-09-20 CVE-2021-39522 Out-of-bounds Write vulnerability in GNU Libredwg
An issue was discovered in libredwg through v0.10.1.3751.
network
low complexity
gnu CWE-787
8.8
2021-09-20 CVE-2021-39523 NULL Pointer Dereference vulnerability in GNU Libredwg
An issue was discovered in libredwg through v0.10.1.3751.
network
low complexity
gnu CWE-476
6.5
2021-09-20 CVE-2021-39525 Out-of-bounds Write vulnerability in GNU Libredwg
An issue was discovered in libredwg through v0.10.1.3751.
network
low complexity
gnu CWE-787
8.8
2021-09-20 CVE-2021-39527 Out-of-bounds Write vulnerability in GNU Libredwg
An issue was discovered in libredwg through v0.10.1.3751.
network
low complexity
gnu CWE-787
8.8
2021-09-20 CVE-2021-39528 Double Free vulnerability in GNU Libredwg
An issue was discovered in libredwg through v0.10.1.3751.
network
low complexity
gnu CWE-415
8.8
2021-09-20 CVE-2021-39530 Out-of-bounds Write vulnerability in GNU Libredwg
An issue was discovered in libredwg through v0.10.1.3751.
network
low complexity
gnu CWE-787
8.8
2021-07-01 CVE-2021-36080 Double Free vulnerability in GNU Libredwg
GNU LibreDWG 0.12.3.4163 through 0.12.3.4191 has a double-free in bit_chain_free (called from dwg_encode_MTEXT and dwg_encode_add_object).
network
low complexity
gnu CWE-415
8.8
2021-05-18 CVE-2020-23861 Out-of-bounds Write vulnerability in GNU Libredwg 0.10.1
A heap-based buffer overflow vulnerability exists in LibreDWG 0.10.1 via the read_system_page function at libredwg-0.10.1/src/decode_r2007.c:666:5, which causes a denial of service by submitting a dwg file.
local
low complexity
gnu CWE-787
5.5