Vulnerabilities > GNU > Libredwg

DATE CVE VULNERABILITY TITLE RISK
2020-01-08 CVE-2020-6614 Out-of-bounds Read vulnerability in multiple products
GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bfr_read in decode.c.
network
gnu opensuse CWE-125
5.8
2020-01-08 CVE-2020-6613 Out-of-bounds Read vulnerability in multiple products
GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bit_search_sentinel in bits.c.
network
gnu opensuse CWE-125
5.8
2020-01-08 CVE-2020-6612 Out-of-bounds Read vulnerability in multiple products
GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in copy_compressed_bytes in decode_r2007.c.
network
gnu opensuse CWE-125
5.8
2020-01-08 CVE-2020-6611 NULL Pointer Dereference vulnerability in multiple products
GNU LibreDWG 0.9.3.2564 has a NULL pointer dereference in get_next_owned_entity in dwg.c.
network
gnu opensuse CWE-476
4.3
2020-01-08 CVE-2020-6610 Allocation of Resources Without Limits or Throttling vulnerability in multiple products
GNU LibreDWG 0.9.3.2564 has an attempted excessive memory allocation in read_sections_map in decode_r2007.c.
network
gnu opensuse CWE-770
4.3
2020-01-08 CVE-2020-6609 Out-of-bounds Read vulnerability in multiple products
GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in read_pages_map in decode_r2007.c.
network
gnu opensuse CWE-125
6.8
2019-12-27 CVE-2019-20015 Allocation of Resources Without Limits or Throttling vulnerability in multiple products
An issue was discovered in GNU LibreDWG 0.92.
network
gnu opensuse CWE-770
4.3
2019-12-27 CVE-2019-20014 Double Free vulnerability in multiple products
An issue was discovered in GNU LibreDWG before 0.93.
network
gnu opensuse CWE-415
6.8
2019-12-27 CVE-2019-20013 Allocation of Resources Without Limits or Throttling vulnerability in multiple products
An issue was discovered in GNU LibreDWG before 0.93.
network
gnu opensuse CWE-770
4.3
2019-12-27 CVE-2019-20012 Allocation of Resources Without Limits or Throttling vulnerability in multiple products
An issue was discovered in GNU LibreDWG 0.92.
network
gnu opensuse CWE-770
4.3