LI
Product
libredwg
101
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 5High 62Medium 27Low 7
Watch
Add libredwg to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-35164 | 9.8 | Aug 18 | LibreDWG v0.12.4.4608 & commit f2dea29 was discovered to contain a heap use-after-free via bit_copy_chain Affected: before 0.12.4.4608 |
| CVE-2021-28237 | 9.8 | Dec 2 | LibreDWG v0.12.3 was discovered to contain a heap-buffer overflow via decode_preR13 Affected: 0.12.3 |
| CVE-2019-20914 | 9.8 | Jul 16 | An issue was discovered in GNU LibreDWG through 0.9.3 Affected: through 0.9.3 |
| CVE-2019-9774 | 9.1 | Mar 14 | An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645 Affected: 0.7; 0.7.1645 |
| CVE-2019-9775 | 9.1 | Mar 14 | An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645 Affected: 0.7; 0.7.1645 |
| CVE-2023-36274 | 8.8 | Jun 23 | LibreDWG v0.11 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_write_TF at bits.c Affected: 0.11 through 0.12.5 |
| CVE-2023-36273 | 8.8 | Jun 23 | LibreDWG v0.12.5 was discovered to contain a heap buffer overflow via the function bit_calc_CRC at bits.c Affected: 0.12.5 |
| CVE-2023-36272 | 8.8 | Jun 23 | LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_utf8_to_TU at bits.c Affected: 0.10 through 0.12.5 |
| CVE-2023-36271 | 8.8 | Jun 23 | LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_wcs2nlen at bits.c Affected: 0.10 through 0.12.5 |
| CVE-2023-25222 | 8.8 | Mar 1 | A heap-based buffer overflow vulnerability exits in GNU LibreDWG v0.12.5 via the bit_read_RC function at bits.c Affected: 0.12.5 |
| CVE-2021-42586 | 8.8 | May 23 | A heap buffer overflow was discovered in copy_bytes in decode_r2007.c in dwgread before 0.12.4 via a crafted dwg file Affected: before 0.12.4 |
| CVE-2021-42585 | 8.8 | May 23 | A heap buffer overflow was discovered in copy_compressed_bytes in decode_r2007.c in dwgread before 0.12.4 via a crafted dwg file Affected: before 0.12.4 |
| CVE-2021-39530 | 8.8 | Sep 20 | An issue was discovered in libredwg through v0.10.1.3751 Affected: through 0.10.1.3751 |
| CVE-2021-39528 | 8.8 | Sep 20 | An issue was discovered in libredwg through v0.10.1.3751 Affected: through 0.10.1.3751 |
| CVE-2021-39527 | 8.8 | Sep 20 | An issue was discovered in libredwg through v0.10.1.3751 Affected: through 0.10.1.3751 |
| CVE-2021-39525 | 8.8 | Sep 20 | An issue was discovered in libredwg through v0.10.1.3751 Affected: through 0.10.1.3751 |
| CVE-2021-39522 | 8.8 | Sep 20 | An issue was discovered in libredwg through v0.10.1.3751 Affected: through 0.10.1.3751 |
| CVE-2021-36080 | 8.8 | Jul 1 | GNU LibreDWG 0.12.3.4163 through 0.12.3.4191 has a double-free in bit_chain_free (called from dwg_encode_MTEXT and dwg_encode_add_object) Affected: 0.12.3.4163 through 0.12.3.4191 |
| CVE-2020-21844 | 8.8 | May 17 | GNU LibreDWG 0.10 is affected by: memcpy-param-overlap Affected: 0.10 |
| CVE-2020-21843 | 8.8 | May 17 | A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_read_RC ../../src/bits.c:318 Affected: 0.10 |
| CVE-2020-21842 | 8.8 | May 17 | A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_section_revhistory ../../src/decode.c:3051 Affected: 0.10 |
| CVE-2020-21831 | 8.8 | May 17 | A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_section_handles ../../src/decode.c:2637 Affected: 0.10 |
| CVE-2020-21841 | 8.8 | May 17 | A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_read_B ../../src/bits.c:135 Affected: 0.10 |
| CVE-2020-21840 | 8.8 | May 17 | A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_search_sentinel ../../src/bits.c:1985 Affected: 0.10 |
| CVE-2020-21838 | 8.8 | May 17 | A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via: read_2004_section_appinfo ../../src/decode.c:2842 Affected: 0.10 |
| CVE-2020-21836 | 8.8 | May 17 | A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_section_preview ../../src/decode.c:3175 Affected: 0.10 |
| CVE-2020-21833 | 8.8 | May 17 | A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via: read_2004_section_classes ../../src/decode.c:2440 Affected: 0.10 |
| CVE-2020-21832 | 8.8 | May 17 | A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_compressed_section ../../src/decode.c:2417 Affected: 0.10 |
| CVE-2020-21830 | 8.8 | May 17 | A heap based buffer overflow vulneraibility exists in GNU LibreDWG 0.10 via bit_calc_CRC ../../src/bits.c:2213 Affected: 0.10 |
| CVE-2020-21819 | 8.8 | May 17 | A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10.2641via htmlescape ../../programs/escape.c:51 Affected: 0.10.2641 |
| CVE-2020-21818 | 8.8 | May 17 | A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:48 Affected: 0.10.2641 |
| CVE-2020-21816 | 8.8 | May 17 | A heab based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:46 Affected: 0.10.2641 |
| CVE-2020-21814 | 8.8 | May 17 | A heap based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via htmlwescape ../../programs/escape.c:97 Affected: 0.10.2641 |
| CVE-2019-20912 | 8.8 | Jul 16 | An issue was discovered in GNU LibreDWG through 0.9.3 Affected: through 0.9.3 |
| CVE-2020-6609 | 8.8 | Jan 8 | GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in read_pages_map in decode_r2007.c Affected: 0.9.3.2564 |
| CVE-2019-20014 | 8.8 | Dec 27 | An issue was discovered in GNU LibreDWG before 0.93 Affected: before 0.9.3 |
| CVE-2019-20011 | 8.8 | Dec 27 | An issue was discovered in GNU LibreDWG 0.92 Affected: 0.9.2 |
| CVE-2019-20010 | 8.8 | Dec 27 | An issue was discovered in GNU LibreDWG 0.92 Affected: 0.9.2 |
| CVE-2019-20915 | 8.1 | Jul 16 | An issue was discovered in GNU LibreDWG through 0.9.3 Affected: through 0.9.3 |
| CVE-2019-20913 | 8.1 | Jul 16 | An issue was discovered in GNU LibreDWG through 0.9.3 Affected: through 0.9.3 |
| CVE-2019-20910 | 8.1 | Jul 16 | An issue was discovered in GNU LibreDWG through 0.9.3 Affected: through 0.9.3 |
| CVE-2020-6614 | 8.1 | Jan 8 | GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bfr_read in decode.c Affected: 0.9.3.2564 |
| CVE-2020-6613 | 8.1 | Jan 8 | GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bit_search_sentinel in bits.c Affected: 0.9.3.2564 |
| CVE-2020-6612 | 8.1 | Jan 8 | GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in copy_compressed_bytes in decode_r2007.c Affected: 0.9.3.2564 |
| CVE-2022-45332 | 7.8 | Nov 30 | LibreDWG v0.12.4.4643 was discovered to contain a heap buffer overflow via the function decode_preR13_section_hdr at decode_r11.c Affected: 0.12.4.4643 |
| CVE-2022-33034 | 7.8 | Jun 23 | LibreDWG v0.12.4.4608 was discovered to contain a stack overflow via the function copy_bytes at decode_r2007.c Affected: 0.12.4.4608 |
| CVE-2022-33033 | 7.8 | Jun 23 | LibreDWG v0.12.4.4608 was discovered to contain a double-free via the function dwg_read_file at dwg.c Affected: 0.12.4.4608 |
| CVE-2022-33032 | 7.8 | Jun 23 | LibreDWG v0.12.4.4608 was discovered to contain a heap-buffer-overflow via the function decode_preR13_section_hdr at decode_r11.c Affected: All versions, or not specified |
| CVE-2022-33028 | 7.8 | Jun 23 | LibreDWG v0.12.4.4608 was discovered to contain a heap buffer overflow via the function dwg_add_object at decode.c Affected: All versions, or not specified |
| CVE-2022-33027 | 7.8 | Jun 23 | LibreDWG v0.12.4.4608 was discovered to contain a heap-use-after-free via the function dwg_add_handleref at dwg.c Affected: All versions, or not specified |