Description
A heap-based buffer over-read exists in libopencad 0.2.0 in the ReadMCHAR function in lib/dwg/io.cpp, resulting in an application crash.
References (1)
Core 1
Core References
Exploit, Third Party Advisory x_refsource_misc
https://github.com/sandyre/libopencad/issues/43
Scores
CVSS v3
6.5
EPSS
0.0029
EPSS Percentile
51.8%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Details
CWE
CWE-125
Status
published
Products (1)
libopencad_project/libopencad
0.2.0
Published
Oct 18, 2018
Tracked Since
Feb 18, 2026