Double Free Vulnerability in LibreDWG Affects Multiple Versions
CVE-2021-39528

8.8HIGH

Key Information:

Vendor

Gnu
Status
Libredwg
Vendor
CVE Published:
20 September 2021

What is CVE-2021-39528?

A double free vulnerability in the dwg_free_MATERIAL_private() function of LibreDWG has been identified, which may allow attackers to exploit memory management issues. The flaw can lead to potential crashes or manipulation of an affected system, especially when handling specific DWG files.

References

https://github.com/LibreDWG/libredwg/issues/256
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.