Vulnerabilities > GNU > Libredwg > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-01-01 | CVE-2021-45950 | Out-of-bounds Write vulnerability in GNU Libredwg LibreDWG 0.12.4.4313 through 0.12.4.4367 has an out-of-bounds write in dwg_free_BLOCK_private (called from dwg_free_BLOCK and dwg_free_object). | 6.5 |
| 2021-09-20 | CVE-2021-39521 | NULL Pointer Dereference vulnerability in GNU Libredwg An issue was discovered in libredwg through v0.10.1.3751. | 6.5 |
| 2021-09-20 | CVE-2021-39523 | NULL Pointer Dereference vulnerability in GNU Libredwg An issue was discovered in libredwg through v0.10.1.3751. | 6.5 |
| 2021-05-18 | CVE-2020-23861 | Out-of-bounds Write vulnerability in GNU Libredwg 0.10.1 A heap-based buffer overflow vulnerability exists in LibreDWG 0.10.1 via the read_system_page function at libredwg-0.10.1/src/decode_r2007.c:666:5, which causes a denial of service by submitting a dwg file. | 5.5 |
| 2021-05-17 | CVE-2020-21834 | NULL Pointer Dereference vulnerability in GNU Libredwg 0.10 A null pointer deference issue exists in GNU LibreDWG 0.10 via get_bmp ../../programs/dwgbmp.c:164. | 6.5 |
| 2021-05-17 | CVE-2020-21835 | NULL Pointer Dereference vulnerability in GNU Libredwg 0.10 A null pointer deference issue exists in GNU LibreDWG 0.10 via read_2004_compressed_section ../../src/decode.c:2337. | 6.5 |
| 2021-05-17 | CVE-2020-21839 | Memory Leak vulnerability in GNU Libredwg 0.10 An issue was discovered in GNU LibreDWG 0.10. | 6.5 |
| 2021-05-17 | CVE-2020-21815 | NULL Pointer Dereference vulnerability in GNU Libredwg 0.10.2641 A null pointer deference issue exists in GNU LibreDWG 0.10.2641 via output_TEXT ../../programs/dwg2SVG.c:114, which causes a denial of service (application crash). | 6.5 |
| 2021-05-17 | CVE-2020-21817 | NULL Pointer Dereference vulnerability in GNU Libredwg 0.10.2641 A null pointer dereference issue exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:29. | 6.5 |
| 2020-07-17 | CVE-2020-15807 | NULL Pointer Dereference vulnerability in GNU Libredwg GNU LibreDWG before 0.11 allows NULL pointer dereferences via crafted input files. | 6.5 |