| CVE-2021-3530 | ALTO7.5 | A flaw was discovered in GNU libiberty within demangle_path() in rust-demangle.c, as distributed in GNU Binutils version 2.36. A crafted symbol can cause stack memory to be exhausted leading to a crash. | 02/06/2021 |
| CVE-2020-18395 | ALTO7.5 | A NULL-pointer deference issue was discovered in GNU_gama::set() in ellipsoid.h in Gama 2.04 which can lead to a denial of service (DOS) via segment faults caused by crafted inputs. | 28/05/2021 |
| CVE-2021-3549 | ALTO7.1 | An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large section to avr_elf32_load_records_from_section() probably resulting in a crash or in some cases memory corruption. The highest threat from this vulnerability is to integrity as well as system a | 26/05/2021 |
| CVE-2021-33574 | CRÍTICO9.8 | The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (passed through its struct sigevent parameter) after it has been freed by the caller, leading to a denial of service (application crash) or possibly unspecified other | 25/05/2021 |
| CVE-2020-23861 | MEDIO5.5 | A heap-based buffer overflow vulnerability exists in LibreDWG 0.10.1 via the read_system_page function at libredwg-0.10.1/src/decode_r2007.c:666:5, which causes a denial of service by submitting a dwg file. | 18/05/2021 |
| CVE-2020-23856 | MEDIO5.5 | Use-after-Free vulnerability in cflow 1.6 in the void call(char *name, int line) function at src/parser.c, which could cause a denial of service via the pointer variable caller->callee. | 18/05/2021 |
| CVE-2020-21844 | ALTO8.8 | GNU LibreDWG 0.10 is affected by: memcpy-param-overlap. The impact is: execute arbitrary code (remote). The component is: read_2004_section_header ../../src/decode.c:2580. | 17/05/2021 |
| CVE-2020-21843 | ALTO8.8 | A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_read_RC ../../src/bits.c:318. | 17/05/2021 |
| CVE-2020-21842 | ALTO8.8 | A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_section_revhistory ../../src/decode.c:3051. | 17/05/2021 |
| CVE-2020-21831 | ALTO8.8 | A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_section_handles ../../src/decode.c:2637. | 17/05/2021 |
| CVE-2020-21841 | ALTO8.8 | A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_read_B ../../src/bits.c:135. | 17/05/2021 |
| CVE-2020-21840 | ALTO8.8 | A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_search_sentinel ../../src/bits.c:1985. | 17/05/2021 |
| CVE-2020-21839 | MEDIO6.5 | An issue was discovered in GNU LibreDWG 0.10. Crafted input will lead to an memory leak in dwg_decode_eed ../../src/decode.c:3638. | 17/05/2021 |
| CVE-2020-21838 | ALTO8.8 | A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via: read_2004_section_appinfo ../../src/decode.c:2842. | 17/05/2021 |
| CVE-2020-21836 | ALTO8.8 | A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_section_preview ../../src/decode.c:3175. | 17/05/2021 |
| CVE-2020-21835 | MEDIO6.5 | A null pointer deference issue exists in GNU LibreDWG 0.10 via read_2004_compressed_section ../../src/decode.c:2337. | 17/05/2021 |
| CVE-2020-21834 | MEDIO6.5 | A null pointer deference issue exists in GNU LibreDWG 0.10 via get_bmp ../../programs/dwgbmp.c:164. | 17/05/2021 |
| CVE-2020-21833 | ALTO8.8 | A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via: read_2004_section_classes ../../src/decode.c:2440. | 17/05/2021 |
| CVE-2020-21832 | ALTO8.8 | A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_compressed_section ../../src/decode.c:2417. | 17/05/2021 |
| CVE-2020-21830 | ALTO8.8 | A heap based buffer overflow vulneraibility exists in GNU LibreDWG 0.10 via bit_calc_CRC ../../src/bits.c:2213. | 17/05/2021 |