A code execution vulnerability exists in the dxfRW::processLType() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dxf file can lead to a use-after-free vulnerability. An attacker can provide a malicious file to trigger this vulnerability.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
07 Nov 2023, 03:30
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2021-11-19 19:15
Updated : 2024-02-28 18:48
NVD link : CVE-2021-21900
Mitre link : CVE-2021-21900
CVE.ORG link : CVE-2021-21900
JSON object : View
Products Affected
librecad
- libdxfrw
debian
- debian_linux
fedoraproject
- fedora
CWE
CWE-416
Use After Free