medium5.5
CVE-2023-26157
Versions of the package libredwg before 0.12.5.6384 are vulnerable to Denial of Service (DoS) due to an out-of-bounds read involving section->num_pages in deco…
Impact
Versions of the package libredwg before 0.12.5.6384 are vulnerable to Denial of Service (DoS) due to an out-of-bounds read involving section->num_pages in decode_r2007.c.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gnu | Libredwg | before 0.12.5.6384 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/LibreDWG/libredwg/commit/c8cf03ce4c2315b146caf582ea061c0460193bcc
- https://github.com/LibreDWG/libredwg/issues/850
- https://security.snyk.io/vuln/SNYK-UNMANAGED-LIBREDWG-6070730
- https://github.com/LibreDWG/libredwg/commit/c8cf03ce4c2315b146caf582ea061c0460193bcc
- https://github.com/LibreDWG/libredwg/issues/850
- https://security.snyk.io/vuln/SNYK-UNMANAGED-LIBREDWG-6070730