A heap-based buffer overflow vulnerability exists in LibreDWG 0.10.1 via the read_system_page function at libredwg-0.10.1/src/decode_r2007.c:666:5, which causes a denial of service by submitting a dwg file.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://github.com/LibreDWG/libredwg/issues/248 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2021-05-18T15:02:32
Updated: 2024-08-04T15:05:11.346Z
Reserved: 2020-08-13T00:00:00
Link: CVE-2020-23861
Vulnrichment
No data.
NVD
Status : Modified
Published: 2021-05-18T16:15:07.497
Modified: 2024-11-21T05:14:08.627
Link: CVE-2020-23861
Redhat
No data.