CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 23/06/2023 |
| CVE-2023-36272 | HOCH8.8 | LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_utf8_to_TU at bits.c. | 23/06/2023 |
| CVE-2023-36271 | HOCH8.8 | LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_wcs2nlen at bits.c. | 23/06/2023 |
| CVE-2023-25222 | HOCH8.8 | A heap-based buffer overflow vulnerability exits in GNU LibreDWG v0.12.5 via the bit_read_RC function at bits.c. | 01/03/2023 |
| CVE-2022-45332 | HOCH7.8 | LibreDWG v0.12.4.4643 was discovered to contain a heap buffer overflow via the function decode_preR13_section_hdr at decode_r11.c. | 30/11/2022 |
| CVE-2022-35164 | KRITISCH9.8 | LibreDWG v0.12.4.4608 & commit f2dea29 was discovered to contain a heap use-after-free via bit_copy_chain. | 18/08/2022 |
| CVE-2022-33034 | HOCH7.8 | LibreDWG v0.12.4.4608 was discovered to contain a stack overflow via the function copy_bytes at decode_r2007.c. | 23/06/2022 |
| CVE-2022-33033 | HOCH7.8 | LibreDWG v0.12.4.4608 was discovered to contain a double-free via the function dwg_read_file at dwg.c. | 23/06/2022 |
| CVE-2022-33024 | HOCH7.5 | There is an Assertion `int decode_preR13_entities(BITCODE_RL, BITCODE_RL, unsigned int, BITCODE_RL, BITCODE_RL, Bit_Chain *, Dwg_Data *' failed at dwg2dxf: decode.c:5801 in libredwg v0.12.4.4608. | 23/06/2022 |
| CVE-2021-42586 | HOCH8.8 | A heap buffer overflow was discovered in copy_bytes in decode_r2007.c in dwgread before 0.12.4 via a crafted dwg file. | 23/05/2022 |
| CVE-2021-42585 | HOCH8.8 | A heap buffer overflow was discovered in copy_compressed_bytes in decode_r2007.c in dwgread before 0.12.4 via a crafted dwg file. | 23/05/2022 |
| CVE-2021-45950 | MITTEL6.5 | LibreDWG 0.12.4.4313 through 0.12.4.4367 has an out-of-bounds write in dwg_free_BLOCK_private (called from dwg_free_BLOCK and dwg_free_object). | 01/01/2022 |
| CVE-2021-28237 | KRITISCH9.8 | LibreDWG v0.12.3 was discovered to contain a heap-buffer overflow via decode_preR13. | 02/12/2021 |
| CVE-2021-28236 | HOCH7.5 | LibreDWG v0.12.3 was discovered to contain a NULL pointer dereference via out_dxfb.c. | 02/12/2021 |
| CVE-2021-39530 | HOCH8.8 | An issue was discovered in libredwg through v0.10.1.3751. bit_wcs2nlen() in bits.c has a heap-based buffer overflow. | 20/09/2021 |
| CVE-2021-39528 | HOCH8.8 | An issue was discovered in libredwg through v0.10.1.3751. dwg_free_MATERIAL_private() in dwg.spec has a double free. | 20/09/2021 |
| CVE-2021-39527 | HOCH8.8 | An issue was discovered in libredwg through v0.10.1.3751. appinfo_private() in decode.c has a heap-based buffer overflow. | 20/09/2021 |