Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-45342
7.8
HIGHCVSS v3
Published
January 25, 2022
CVSS v2
6.8 MEDIUM
Affected
6 projects
Assigned by
MITRE
Severity scale
010
Description
A buffer overflow vulnerability in CDataList of the jwwlib component of LibreCAD 2.2.0-rc3 and older allows an attacker to achieve Remote Code Execution using a crafted JWW document.
LibreCAD/LibreCAD
GitHubLibreCAD is a cross-platform 2D CAD program. It can read DXF/DWG, and write DXF/DWG/PDF/SVG files. It supports point/line/circle/ellipse/parabola/hyperbola/spline primitives. The GUI is highly customizable, and has dozens of translations.
GitHubLibreCAD is a cross-platform 2D CAD program. It can read DXF/DWG, and write DXF/DWG/PDF/SVG files. It supports point/line/circle/ellipse/parabola/hyperbola/spline primitives. The GUI is highly customizable, and has dozens of translations.= 2.2.0, <= 2.1.3NVD
Crates.io
Docker Hub
NPM
RubyGems