Unrated severityNVD Advisory· Published Nov 19, 2021· Updated Aug 3, 2024
CVE-2021-21898
CVE-2021-21898
Description
A code execution vulnerability exists in the dwgCompressor::decompress18() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6- LibreCad/libdxfrwdescription
- osv-coords4 versionspkg:rpm/opensuse/libdxfrw&distro=openSUSE%20Leap%2015.3pkg:rpm/opensuse/librecad&distro=openSUSE%20Leap%2015.3pkg:rpm/suse/libdxfrw&distro=SUSE%20Package%20Hub%2015%20SP3pkg:rpm/suse/librecad&distro=SUSE%20Package%20Hub%2015%20SP3
< 1.0.1+git.20220109-bp153.2.3.1+ 3 more
- (no CPE)range: < 1.0.1+git.20220109-bp153.2.3.1
- (no CPE)range: < 2.2.0~rc3-bp153.2.3.1
- (no CPE)range: < 1.0.1+git.20220109-bp153.2.3.1
- (no CPE)range: < 2.2.0~rc3-bp153.2.3.1
Patches
Vulnerability mechanics
References
6- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDI3HCTCACMIC7I4ILB3NRU6DCMADI5H/mitrevendor-advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZTIAMP7QJDKV4ADDLR4GVVX2TXYLHVOZ/mitrevendor-advisory
- security.gentoo.org/glsa/202305-26mitrevendor-advisory
- www.debian.org/security/2022/dsa-5077mitrevendor-advisory
- lists.debian.org/debian-lts-announce/2021/12/msg00002.htmlmitremailing-list
- talosintelligence.com/vulnerability_reports/TALOS-2021-1349mitre
News mentions
0No linked articles in our index yet.