PT-2022-21659
CVE-2022-33034
·
Published
2022-06-22
·
Updated
2022-06-29
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
LibreDWG version 0.12.4.4608
Description
A stack overflow issue was discovered in the function copy bytes at decode r2007.c, which can be exploited.
Recommendations
For LibreDWG version 0.12.4.4608, consider disabling the copy bytes function in decode r2007.c as a temporary workaround until a patch is available.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾