8.8 High

CVE-2021-21897 A code execution vulnerability exists in the DL_Dxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0

Description

A code execution vulnerability exists in the DL_Dxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0. A specially-crafted .dxf file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.

Affected products and versions

Product	Affected versions	Fixed in
Ribbonsoft	Versions not published

Do you use Ribbonsoft?

Track this CVE Watch Ribbonsoft Check my SBOMs

www.cveye.io/en/cve/CVE-2021-21897

Timeline

Published September 8, 2021
Last modified August 3, 2024

References

talosintelligence.com talosintelligence.com
FEDORA-2022-635599924b lists.fedoraproject.org
[debian-lts-announce] 20220607 [SECURITY] [DLA 3046-1] librecad security update lists.debian.org
FEDORA-2022-8d01b8b6d3 lists.fedoraproject.org
FEDORA-2022-9d17930140 lists.fedoraproject.org
FEDORA-2022-9cbdf39a5a lists.fedoraproject.org

Track this CVE