Buffer Overflow Vulnerability in LibreCAD by LibreCAD Team
CVE-2021-45341

8.8HIGH

Key Information:

Vendor

Librecad

Status
Librecad
Vendor
CVE Published:
25 January 2022

What is CVE-2021-45341?

A buffer overflow vulnerability exists in the CDataMoji function of the jwwlib component in LibreCAD. This flaw allows an attacker to exploit the vulnerability by crafting a malicious JWW document. When opened in an affected version of LibreCAD, this can lead to remote code execution, enabling unauthorized access and control over the user's system. Users are advised to update to the latest version to mitigate the risk associated with this vulnerability.

References

https://github.com/LibreCAD/LibreCAD/issues/1462
https://lists.fedoraproject.org/archives/list/package-ann...
vendor-advisory
https://www.debian.org/security/2022/dsa-5077
vendor-advisory

EPSS Score

6% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.