high8.8
CVE-2023-36272
LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_utf8_to_TU at bits.c.
Impact
LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_utf8_to_TU at bits.c.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gnu | Libredwg | from 0.10 through 0.12.5 |