PT-2021-22614

CVE-2021-39530

Published

2021-09-20

Updated

2021-09-24

CVSS 3.1

8.8

High

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: libredwg versions prior to v0.10.1.3752

Description: An issue was discovered in libredwg. The bit wcs2nlen() function in bits.c has a heap-based buffer overflow.

Recommendations: For versions prior to v0.10.1.3752, update to a version that contains a fix for this issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾