CVE-2018-14524

dwg_decode_eed in decode.c in GNU LibreDWG before 0.6 leads to a double free (in dwg_free_eed in free.c) because it does not properly manage the obj->eed value after a free occurs.

Score

CVSS 3.0 6.5 Medium

Status

Modified - cve@mitre.org

Published

2018-07-23

Last modified

2024-08-05

Weaknesses

CWE-415

Affected products

• Libredwg (Gnu)

References

• https://github.com/LibreDWG/libredwg/issues/33
• https://savannah.gnu.org/forum/forum.php?forum_id=9211