Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-23861
5.5
MEDIUMCVSS v3
Published
May 18, 2021
CVSS v2
4.3 MEDIUM
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
A heap-based buffer overflow vulnerability exists in LibreDWG 0.10.1 via the read_system_page function at libredwg-0.10.1/src/decode_r2007.c:666:5, which causes a denial of service by submitting a dwg file.
LibreDWG/libredwg
GitHubOfficial mirror of libredwg. With CI hooks and nightly releases. PR's ok
GitHubOfficial mirror of libredwg. With CI hooks and nightly releases. PR's ok= 0.10.1NVD