5.5
Medium
CVE-2023-26157 Versions of the package libredwg before 0.12.5.6384 are vulnerable to Denial of Service (DoS) due to an out-of-bounds…
Description
Versions of the package libredwg before 0.12.5.6384 are vulnerable to Denial of Service (DoS) due to an out-of-bounds read involving section->num_pages in decode_r2007.c.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| libredwg 0.12 | earliest → < 0.12.5.6384 | 0.12.5.6384 |