GNU LibreDWG vulnerabilities

A vulnerability was found in GNU LibreDWG up to version 0.13.4, involving a null pointer dereference in the dwg_next_entity function of src/dwg.c when processing the next_obj argument. The attack requires local access and the exploit has been made public.

A vulnerability was found in GNU LibreDWG 0.13.4-154-g0b573035 in the decompress_R2004_section function of src/decode.c. Manipulation can cause a heap-based buffer overflow.

A vulnerability was found in GNU LibreDWG up to version 0.13.4 in the dwg_bmp function of src/dwg.c, part of the BMP Image Handler component. Manipulation leads to a heap-based buffer overflow. The attack requires local access and the exploit is publicly available.

GNU libredwg up to version 0.13.4.8160 contains a heap-based buffer overflow in the bit_read_RC function of bits.c in the Dwgbmp Utility component, which can be exploited remotely.

In GNU LibreDWG up to 0.14, a vulnerability was found in the function read_2004_compressed_section of src/decode.c in the Dwgbmp Utility component. Manipulation can lead to out-of-bounds read. Local access is required.

In GNU LibreDWG up to 0.14, a vulnerability was found in the function match_BLOCK_HEADER of dwggrep.c in the Dwggrep Utility component. Manipulation leads to null pointer dereference. Local access is required.

A weakness has been identified in GNU LibreDWG up to version 0.14, affecting the bit_convert_TU function in programs/dwggrep.c of the Dwggrep Utility component. This manipulation causes an out-of-bounds read. The attack requires local access and the exploit has been made public.

In GNU LibreDWG up to 0.14, a vulnerability was found in the function dwg_next_entity of src/decode.c in the DWG File Handler component. Manipulation leads to null pointer dereference. Local access is required.

A heap-based buffer overflow vulnerability was identified in GNU LibreDWG up to version 0.14 in the decompress_R2004_section function of the Dwgread Utility's src/decode.c file. The attack requires local access and the exploit is publicly available.

In GNU LibreDWG up to 0.14, a vulnerability was found in the function decompress_R2004_section of src/decode.c in the Dwgread Utility component. Manipulation can lead to reachable assertion. Local access is required.

In GNU LibreDWG up to version 0.14, a vulnerability exists in the function read_2004_compressed_section in file src/decode.c of the Dwgread utility. Manipulation can lead to a heap-based buffer overflow. The attack requires local access and the exploit has been made public.

In GNU LibreDWG version 0.10, a vulnerability was found involving overlapping memory areas in the memcpy function. The issue occurs in the read_2004_section_header function in decode.c. It may allow remote code execution.

A heap-based buffer overflow vulnerability was found in GNU LibreDWG version 0.10 in the bit_read_RC function in bits.c. An attacker could exploit this to execute arbitrary code or cause a system crash.

A heap-based buffer overflow vulnerability was found in GNU LibreDWG version 0.10. The issue occurs in the read_2004_section_revhistory function at src/decode.c:3051.

A heap-based buffer overflow vulnerability was found in GNU LibreDWG version 0.10. The issue occurs in the read_2004_section_handles function in decode.c, potentially leading to crashes or arbitrary code execution.

A heap-based buffer overflow vulnerability was found in GNU LibreDWG version 0.10 in the bit_read_B function in bits.c at line 135. This flaw can be exploited by an attacker to execute arbitrary code.

A heap-based buffer overflow vulnerability exists in GNU LibreDWG version 0.10 via the bit_search_sentinel function in ../../src/bits.c:1985. This flaw allows out-of-bounds memory writes.

A memory leak vulnerability was discovered in GNU LibreDWG version 0.10 in the dwg_decode_eed function at decode.c:3638. Crafted input can cause a memory leak, potentially leading to resource exhaustion.

A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10 in the read_2004_section_appinfo function at ../../src/decode.c:2842. The flaw occurs when processing specially crafted DWG files.

A heap-based buffer overflow vulnerability was found in GNU LibreDWG version 0.10. The issue occurs in the read_2004_section_preview function in decode.c, potentially leading to crashes or arbitrary code execution.

A null pointer dereference issue exists in GNU LibreDWG version 0.10 in the read_2004_compressed_section function in decode.c. The bug can cause a program crash when processing specially crafted DWG files.

A null pointer dereference issue was discovered in GNU LibreDWG 0.10 in the get_bmp function at dwgbmp.c:164. This flaw can cause a program crash.

A heap-based buffer overflow vulnerability exists in GNU LibreDWG version 0.10 in the read_2004_section_classes function at decode.c:2440. This flaw can be exploited by an attacker to execute arbitrary code or cause a denial of service.

A heap-based buffer overflow vulnerability was found in GNU LibreDWG version 0.10 in the read_2004_compressed_section function at ../../src/decode.c:2417. This issue can lead to unexpected program behavior.

A heap-based buffer overflow vulnerability exists in GNU LibreDWG version 0.10 in the bit_calc_CRC function in bits.c. This vulnerability could be exploited by an attacker to execute arbitrary code or cause a system crash.

A heap-based buffer overflow vulnerability was found in GNU LibreDWG version 0.10 in the read_2004_compressed_section function in decode.c at line 2379. This flaw could allow an attacker to execute arbitrary code or cause a denial of service.

A heap-based buffer overflow vulnerability was discovered in GNU LibreDWG version 0.10.2641 in the htmlescape function within escape.c. This flaw could allow an attacker to execute arbitrary code or cause a system crash.

A heap-based buffer overflow vulnerability was found in GNU LibreDWG version 0.10.2641 in the htmlescape function within escape.c at line 48. This flaw allows uncontrolled memory writes beyond the allocated buffer.

A null pointer dereference issue exists in GNU LibreDWG version 0.10.2641 via htmlescape in escape.c:29. This flaw causes a denial of service (DoS) through application crash.

A heap-based buffer overflow vulnerability exists in GNU LibreDWG version 0.10.2641 in the htmlescape function at ../../programs/escape.c:46. This flaw allows for uncontrolled memory writes.

In GNU LibreDWG version 0.10.2641, a null pointer dereference issue exists in the output_TEXT function at dwg2SVG.c:114, causing a denial of service via application crash.

A heap-based buffer overflow vulnerability was discovered in GNU LibreDWG version 0.10.2641 in the htmlwescape function at escape.c line 97. This issue can lead to unexpected program behavior.

A heap-based buffer overflow vulnerability was discovered in GNU LibreDWG version 0.10.2641 in the output_TEXT function at programs/dwg2SVG.c:114. This flaw could allow an attacker to execute arbitrary code or cause a denial of service.