PT-2021-10683
CVE-2020-21838
·
تاريخ النشر
2021-05-17
·
تاريخ التحديث
2026-07-09
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
GNU LibreDWG version 0.10
Description:
A heap-based buffer overflow issue exists in the read 2004 section appinfo function, located in the decode.c file. This issue can be exploited via the read 2004 section appinfo function.
Recommendations:
For GNU LibreDWG version 0.10, consider applying a patch or fix to address the heap-based buffer overflow issue in the read 2004 section appinfo function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾