CVE-2023-26157
MEDIUMlibredwg < 0.12.5.6384 - Denial of Service via Out-of-Bounds Read in decode_r2007.c
Title source: llmDescription
Versions of the package libredwg before 0.12.5.6384 are vulnerable to Denial of Service (DoS) due to an out-of-bounds read involving section->num_pages in decode_r2007.c.
References (3)
Core 3
Core References
Exploit, Issue Tracking, Patch
https://github.com/LibreDWG/libredwg/issues/850
Third Party Advisory
https://security.snyk.io/vuln/SNYK-UNMANAGED-LIBREDWG-6070730
Scores
CVSS v3
5.5
EPSS
0.0054
EPSS Percentile
41.0%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-125
CWE-400
Status
published
Products (1)
gnu/libredwg
< 0.12.5.6384
Published
Jan 02, 2024
Tracked Since
Feb 18, 2026