CVE-2021-45950 - LibreDWG 0.12.4.4313 through 0.12.4.4367 has an out-of-bounds write in dwg_free_BLOCK_private (called from dwg_free_BLOCK and dwg_free_object)

MEDIUM

LibreDWG 0.12.4.4313 through 0.12.4.4367 has an out-of-bounds write in dwg_free_BLOCK_private (called from dwg_free_BLOCK and dwg_free_object)

Published Dec 31, 2021

6.5

MEDIUM

CVSS 3.1

EPSS 0.89%

LibreDWG 0.12.4.4313 through 0.12.4.4367 has an out-of-bounds write in dwg_free_BLOCK_private (called from dwg_free_BLOCK and dwg_free_object).

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

Link	Providers	Tags
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34766		x_refsource_MISCExploitIssue TrackingThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-32657		Advisory
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2021-814.yaml		x_refsource_MISCExploitThird Party Advisory