Browse CVEs

MEDIUM 6.5 CVE-2021-32256 An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.36. It is a stack-overflow issue in demangle_type in rust-demangle.c. Binutils No fix yet Fix from $1,6002023-07-18 HIGH 8.8 CVE-2023-36273 LibreDWG v0.12.5 was discovered to contain a heap buffer overflow via the function bit_calc_CRC at bits.c. Libredwg No fix yet Fix from $1,9502023-06-23 HIGH 7.5 CVE-2023-2789 A vulnerability was found in GNU cflow 1.7. It has been rated as problematic. This issue affects the function func_body/parse_variable_declaration of… Cflow No fix yet Fix from $1,9502023-05-18 HIGH 8.8 CVE-2023-25222 A heap-based buffer overflow vulnerability exits in GNU LibreDWG v0.12.5 via the bit_read_RC function at bits.c. Libredwg No fix yet Fix from $1,9502023-03-01 CRITICAL 9.8 CVE-2023-25139 sprintf in the GNU C Library (glibc) 2.37 has a buffer overflow (out-of-bounds write) in some situations with a correct buffer size. This is unrelate… Glibc No fix yet Fix from $2,3002023-02-03 HIGH 7.8 CVE-2022-45332 LibreDWG v0.12.4.4643 was discovered to contain a heap buffer overflow via the function decode_preR13_section_hdr at decode_r11.c. Libredwg No fix yet Fix from $1,9502022-11-30 MEDIUM 6.5 CVE-2022-41550 GNU oSIP v5.3.0 was discovered to contain an integer overflow via the component osip_body_parse_header. Osip No fix yet Fix from $1,6002022-10-11 MEDIUM 5.3 CVE-2022-39046 An issue was discovered in the GNU C Library (glibc) 2.36. When the syslog function is passed a crafted input string larger than 1024 bytes, it reads… Glibc No fix yet Fix from $1,6002022-08-31 HIGH 7.8 CVE-2022-33025 LibreDWG v0.12.4.4608 was discovered to contain a heap-use-after-free via the function decode_preR13_section at decode_r11.c. Libredwg No fix yet Fix from $1,9502022-06-23 HIGH 7.8 CVE-2022-33026 LibreDWG v0.12.4.4608 was discovered to contain a heap buffer overflow via the function bit_calc_CRC at bits.c. Libredwg No fix yet Fix from $1,9502022-06-23 HIGH 7.8 CVE-2022-33027 LibreDWG v0.12.4.4608 was discovered to contain a heap-use-after-free via the function dwg_add_handleref at dwg.c. Libredwg No fix yet Fix from $1,9502022-06-23 HIGH 7.8 CVE-2022-33028 LibreDWG v0.12.4.4608 was discovered to contain a heap buffer overflow via the function dwg_add_object at decode.c. Libredwg No fix yet Fix from $1,9502022-06-23 HIGH 7.8 CVE-2022-33032 LibreDWG v0.12.4.4608 was discovered to contain a heap-buffer-overflow via the function decode_preR13_section_hdr at decode_r11.c. Libredwg No fix yet Fix from $1,9502022-06-23 HIGH 7.8 CVE-2022-33033 LibreDWG v0.12.4.4608 was discovered to contain a double-free via the function dwg_read_file at dwg.c. Libredwg No fix yet Fix from $1,9502022-06-23 HIGH 7.8 CVE-2022-33034 LibreDWG v0.12.4.4608 was discovered to contain a stack overflow via the function copy_bytes at decode_r2007.c. Libredwg No fix yet Fix from $1,9502022-06-23 HIGH 7.5 CVE-2022-33024 There is an Assertion `int decode_preR13_entities(BITCODE_RL, BITCODE_RL, unsigned int, BITCODE_RL, BITCODE_RL, Bit_Chain *, Dwg_Data *' failed at dw… Libredwg No fix yet Fix from $1,9502022-06-23 MEDIUM 5.5 CVE-2021-46195 GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c. This vulnerability allows attackers to cau… Gcc No fix yet Fix from $1,6002022-01-14 MEDIUM 5.5 CVE-2021-45261 An Invalid Pointer vulnerability exists in GNU patch 2.7 via the another_hunk function, which causes a Denial of Service. Patch No fix yet Fix from $1,6002021-12-22 CRITICAL 9.8 CVE-2021-28237 LibreDWG v0.12.3 was discovered to contain a heap-buffer overflow via decode_preR13. Libredwg No fix yet Fix from $2,3002021-12-02 HIGH 7.5 CVE-2021-28236 LibreDWG v0.12.3 was discovered to contain a NULL pointer dereference via out_dxfb.c. Libredwg No fix yet Fix from $1,9502021-12-02 HIGH 7.5 CVE-2020-18395 A NULL-pointer deference issue was discovered in GNU_gama::set() in ellipsoid.h in Gama 2.04 which can lead to a denial of service (DOS) via segment … Gama No fix yet Fix from $1,9502021-05-28 HIGH 7.8 CVE-2020-21827 A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_compressed_section ../../src/decode.c:2379. Libredwg No fix yet Fix from $1,9502021-05-17 HIGH 8.8 CVE-2020-21818 A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:48. Libredwg Mitigation only Fix from $1,9502021-05-17 MEDIUM 5.5 CVE-2021-20284 A flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c due to the nu… Binutils No fix yet Fix from $1,6002021-03-26 MEDIUM 5.5 CVE-2020-16593 A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35, in sca… Binutils No fix yet Fix from $1,6002020-12-09 HIGH 8.1 CVE-2020-6612 GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in copy_compressed_bytes in decode_r2007.c. Libredwg No fix yet Fix from $1,9502020-01-08 HIGH 8.1 CVE-2020-6613 GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bit_search_sentinel in bits.c. Libredwg No fix yet Fix from $1,9502020-01-08 HIGH 8.1 CVE-2020-6614 GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bfr_read in decode.c. Libredwg No fix yet Fix from $1,9502020-01-08 MEDIUM 6.5 CVE-2020-6610 GNU LibreDWG 0.9.3.2564 has an attempted excessive memory allocation in read_sections_map in decode_r2007.c. Libredwg No fix yet Fix from $1,6002020-01-08 MEDIUM 6.5 CVE-2020-6611 GNU LibreDWG 0.9.3.2564 has a NULL pointer dereference in get_next_owned_entity in dwg.c. Libredwg No fix yet Fix from $1,6002020-01-08