4 results (0.009 seconds)

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1

CVE-2023-26157

https://notcve.org/view.php?id=CVE-2023-26157

Versions of the package libredwg before 0.12.5.6384 are vulnerable to Denial of Service (DoS) due to an out-of-bounds read involving section->num_pages in decode_r2007.c. Las versiones del paquete libredwg anteriores a 0.12.5.6384 son vulnerables a la Denegación de Servicio (DoS) debido a una lectura fuera de los límites que involucra section->num_pages en decode_r2007.c. • https://github.com/LibreDWG/libredwg/commit/c8cf03ce4c2315b146caf582ea061c0460193bcc https://github.com/LibreDWG/libredwg/issues/850 https://security.snyk.io/vuln/SNYK-UNMANAGED-LIBREDWG-6070730 • CWE-125: Out-of-bounds Read CWE-400: Uncontrolled Resource Consumption •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1

CVE-2022-33034

https://notcve.org/view.php?id=CVE-2022-33034

LibreDWG v0.12.4.4608 was discovered to contain a stack overflow via the function copy_bytes at decode_r2007.c. Se ha detectado que LibreDWG versión v0.12.4.4608, contiene un desbordamiento de pila por medio de la función copy_bytes en el archivo decode_r2007.c • https://github.com/LibreDWG/libredwg/issues/494 • CWE-787: Out-of-bounds Write •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1

CVE-2022-33033

https://notcve.org/view.php?id=CVE-2022-33033

LibreDWG v0.12.4.4608 was discovered to contain a double-free via the function dwg_read_file at dwg.c. Se ha detectado que LibreDWG versión v0.12.4.4608, contiene una doble liberación por medio de la función dwg_read_file en el archivo dwg.c • https://github.com/LibreDWG/libredwg/issues/493 • CWE-415: Double Free •

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1

CVE-2022-33024

https://notcve.org/view.php?id=CVE-2022-33024

There is an Assertion `int decode_preR13_entities(BITCODE_RL, BITCODE_RL, unsigned int, BITCODE_RL, BITCODE_RL, Bit_Chain *, Dwg_Data *' failed at dwg2dxf: decode.c:5801 in libredwg v0.12.4.4608. Se presenta una aserción "int decode_preR13_entities(BITCODE_RL, BITCODE_RL, unsigned int, BITCODE_RL, BITCODE_RL, Bit_Chain *, Dwg_Data *" fallida en la función dwg2dxf: decode.c:5801 en libredwg v0.12.4.4608 • https://github.com/LibreDWG/libredwg/issues/492 • CWE-617: Reachable Assertion •