CVE-2023-26157

Published January 2nd, 2024

View on NVD ↗

CVSS v3

5.5

MEDIUM

CVSS v2

N/A

Affected

PROJECT

Description

Versions of the package libredwg before 0.12.5.6384 are vulnerable to Denial of Service (DoS) due to an out-of-bounds read involving section->num_pages in decode_r2007.c.

LibreDWG/libredwg

Official mirror of libredwg. With CI hooks and nightly releases. PR's ok

GitHub

1.43K