CVE-2021-45950

LibreDWG 0.12.4.4313 through 0.12.4.4367 has an out-of-bounds write in dwg_free_BLOCK_private (called from dwg_free_BLOCK and dwg_free_object).

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2022-01-01

Last modified

2024-08-04

Weaknesses

CWE-787

Affected products

• Libredwg (Gnu)

References

• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34766
• https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2021-814.yaml