VYPR

Libredwg

by LibreDWG

Source repositories

CVEs (62)

  • CVE-2023-36271HigJun 23, 2023
    risk 0.00cvss 8.8epss 0.01

    LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_wcs2nlen at bits.c.

  • CVE-2021-36080HigJul 1, 2021
    risk 0.00cvss 8.8epss 0.01

    GNU LibreDWG 0.12.3.4163 through 0.12.3.4191 has a double-free in bit_chain_free (called from dwg_encode_MTEXT and dwg_encode_add_object).

Page 4 of 4