Unrated severityNVD Advisory· Published Jan 2, 2024· Updated Nov 14, 2024

CVE-2023-26157

Description

Versions of the package libredwg before 0.12.5.6384 are vulnerable to Denial of Service (DoS) due to an out-of-bounds read involving section->num_pages in decode_r2007.c.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

LibreDWG/Libredwgcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <0.12.5.6384
osv-coords3 versions
pkg:rpm/opensuse/libredwg&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/libredwg&distro=openSUSE%20Tumbleweed pkg:rpm/suse/libredwg&distro=SUSE%20Package%20Hub%2015%20SP5
< 0.12.5.6924-bp155.3.6.1+ 2 more
- (no CPE)range: < 0.12.5.6924-bp155.3.6.1
- (no CPE)range: < 0.12.5.6924-1.1
- (no CPE)range: < 0.12.5.6924-bp155.3.6.1

Patches

Vulnerability mechanics

References

github.com/LibreDWG/libredwg/commit/c8cf03ce4c2315b146caf582ea061c0460193bccmitre
github.com/LibreDWG/libredwg/issues/850mitre
security.snyk.io/vuln/SNYK-UNMANAGED-LIBREDWG-6070730mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000