High severity8.8NVD Advisory· Published Jun 23, 2023· Updated Jun 17, 2026
CVE-2023-36271
CVE-2023-36271
Description
LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_wcs2nlen at bits.c.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6- osv-coords3 versionspkg:rpm/opensuse/libredwg&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/libredwg&distro=openSUSE%20Tumbleweedpkg:rpm/suse/libredwg&distro=SUSE%20Package%20Hub%2015%20SP5
< 0.12.5.5907-bp155.3.3.1+ 2 more
- (no CPE)range: < 0.12.5.5907-bp155.3.3.1
- (no CPE)range: < 0.12.5.5907-1.1
- (no CPE)range: < 0.12.5.5907-bp155.3.3.1
Patches
Vulnerability mechanics
References
3- github.com/LibreDWG/libredwg/commit/c1ed1d91e28a6ddc7a9b5479d4795d58fb6be0canvdPatch
- github.com/LibreDWG/libredwg/issues/681nvdExploitIssue TrackingThird Party Advisory
- github.com/LibreDWG/libredwg/blob/0.10/src/bits.cnvdProduct
News mentions
0No linked articles in our index yet.