PT-2021-17828

CVE-2021-28237

Published

2021-12-02

Updated

2024-06-15

Description by

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: LibreDWG version 0.12.3

Description: The issue is related to a heap-buffer overflow that can occur via the decode preR13 function. This is a general information about the problem, and no specific details about the estimated number of potentially affected devices or real-world incidents are provided.

Recommendations: For LibreDWG version 0.12.3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Zodf0055980

Vendors

Affected products

Weakness enumeration

CWE-787: Out-of-bounds Write

Related identifiers

CVE-2021-28237

OPENSUSE-SU-2022_0149-1