CVE-2022-35164

LibreDWG v0.12.4.4608 & commit f2dea29 was discovered to contain a heap use-after-free via bit_copy_chain.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-08-18

Last modified

2024-08-03

Weaknesses

CWE-416

Affected products

• Libredwg (Gnu)

References

• https://github.com/LibreDWG/libredwg/issues/497