CVE-2023-36271
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk51th percentile - higher than 51% of all known CVEs
Summary
LibreDWG versions 0.10 to 0.12.5 were found to contain a heap buffer overflow in the function bit_wcs2nlen at bits.c.
Risk Assessment
Heap buffer overflow can lead to arbitrary code execution, posing a significant security risk to the system.
Recommendation
It is recommended to upgrade to the latest version of LibreDWG to mitigate this vulnerability.
Other vulnerabilities in LibreDWG
See all- CVE-2023-36274High
LibreDWG versions 0.11 to 0.12.5 were found to contain a heap buffer overflow in the function bit_write_TF in bits.c.
- CVE-2023-36273High
Version 0.12.5 of LibreDWG was found to contain a heap buffer overflow vulnerability in the function bit_calc_CRC in bits.c.
- CVE-2023-36272High
Versions of LibreDWG from 0.10 to 0.12.5 were found to contain a heap buffer overflow vulnerability in the function bit_utf8_to_TU in bits.c.
Original NVD description (English source)
LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_wcs2nlen at bits.c.