PT-2023-25505

CVE-2023-36271

Published

2023-06-23

Updated

2025-03-14

Description by

CVSS 3.1

8.8

High

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LibreDWG version 0.12.5

Description A heap buffer overflow issue was discovered in the bit wcs2nlen function located at bits.c. This issue can potentially be exploited.

Recommendations For LibreDWG version 0.12.5, at the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider disabling the bit wcs2nlen function until a patch is available.

Exploitability

Exploit

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-787: Out-of-bounds Write

Related identifiers

CVE-2023-36271

ALT-PU-2023-2073

OPENSUSE-SU-2023:0201-1