CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 23/06/2023 |
| CVE-2023-36272 | 높음8.8 | LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_utf8_to_TU at bits.c. | 23/06/2023 |
| CVE-2023-36271 | 높음8.8 | LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_wcs2nlen at bits.c. | 23/06/2023 |
| CVE-2023-25222 | 높음8.8 | A heap-based buffer overflow vulnerability exits in GNU LibreDWG v0.12.5 via the bit_read_RC function at bits.c. | 01/03/2023 |
| CVE-2022-45332 | 높음7.8 | LibreDWG v0.12.4.4643 was discovered to contain a heap buffer overflow via the function decode_preR13_section_hdr at decode_r11.c. | 30/11/2022 |
| CVE-2022-35164 | 심각9.8 | LibreDWG v0.12.4.4608 & commit f2dea29 was discovered to contain a heap use-after-free via bit_copy_chain. | 18/08/2022 |
| CVE-2022-33034 | 높음7.8 | LibreDWG v0.12.4.4608 was discovered to contain a stack overflow via the function copy_bytes at decode_r2007.c. | 23/06/2022 |
| CVE-2022-33033 | 높음7.8 | LibreDWG v0.12.4.4608 was discovered to contain a double-free via the function dwg_read_file at dwg.c. | 23/06/2022 |
| CVE-2022-33024 | 높음7.5 | There is an Assertion `int decode_preR13_entities(BITCODE_RL, BITCODE_RL, unsigned int, BITCODE_RL, BITCODE_RL, Bit_Chain *, Dwg_Data *' failed at dwg2dxf: decode.c:5801 in libredwg v0.12.4.4608. | 23/06/2022 |
| CVE-2021-42586 | 높음8.8 | A heap buffer overflow was discovered in copy_bytes in decode_r2007.c in dwgread before 0.12.4 via a crafted dwg file. | 23/05/2022 |
| CVE-2021-42585 | 높음8.8 | A heap buffer overflow was discovered in copy_compressed_bytes in decode_r2007.c in dwgread before 0.12.4 via a crafted dwg file. | 23/05/2022 |
| CVE-2021-45950 | 보통6.5 | LibreDWG 0.12.4.4313 through 0.12.4.4367 has an out-of-bounds write in dwg_free_BLOCK_private (called from dwg_free_BLOCK and dwg_free_object). | 01/01/2022 |
| CVE-2021-28237 | 심각9.8 | LibreDWG v0.12.3 was discovered to contain a heap-buffer overflow via decode_preR13. | 02/12/2021 |
| CVE-2021-28236 | 높음7.5 | LibreDWG v0.12.3 was discovered to contain a NULL pointer dereference via out_dxfb.c. | 02/12/2021 |
| CVE-2021-39530 | 높음8.8 | An issue was discovered in libredwg through v0.10.1.3751. bit_wcs2nlen() in bits.c has a heap-based buffer overflow. | 20/09/2021 |
| CVE-2021-39528 | 높음8.8 | An issue was discovered in libredwg through v0.10.1.3751. dwg_free_MATERIAL_private() in dwg.spec has a double free. | 20/09/2021 |
| CVE-2021-39527 | 높음8.8 | An issue was discovered in libredwg through v0.10.1.3751. appinfo_private() in decode.c has a heap-based buffer overflow. | 20/09/2021 |