Sign in

8.8 High

CVE-2021-21900 A code execution vulnerability exists in the dxfRW::processLType() functionality of LibreCad libdxfrw…

Description

A code execution vulnerability exists in the dxfRW::processLType() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dxf file can lead to a use-after-free vulnerability. An attacker can provide a malicious file to trigger this vulnerability.

Affected products and versions

Product	Affected versions	Fixed in
LibreCAD	Versions not published

The 3 CVEs of LibreCAD →

CVE-2021-21898 A code execution vulnerability exists in the dwgCompressor::decompress18() functionality of LibreCad libdxfrw… 8.8 High CVE-2021-21899 A code execution vulnerability exists in the dwgCompressor::copyCompBytes21 functionality of LibreCad libdxfrw… 8.8 High

Do you use LibreCAD?

Track this CVE Watch LibreCAD Check my SBOMs

www.cveye.io/en/cve/CVE-2021-21900

Timeline

Published November 19, 2021
Last modified August 3, 2024

References

talosintelligence.com talosintelligence.com
FEDORA-2021-fa9e3c23f2 lists.fedoraproject.org
FEDORA-2021-67c946a9f3 lists.fedoraproject.org
[debian-lts-announce] 20211203 [SECURITY] [DLA 2838-1] librecad security update lists.debian.org
DSA-5077 www.debian.org
GLSA-202305-26 security.gentoo.org

Track this CVE