CVE-2018-14524

N/A

Descricao

dwg_decode_eed in decode.c in GNU LibreDWG before 0.6 leads to a double free (in dwg_free_eed in free.c) because it does not properly manage the obj->eed value after a free occurs.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado7/23/2018

Ultima modificacao11/21/2024

Fontenvd

Avistamentos honeypot0

Produtos afetados

gnu:libredwg

Fraquezas (CWE)

CWE-415

Referencias

https://github.com/LibreDWG/libredwg/issues/33(cve@mitre.org)

https://savannah.gnu.org/forum/forum.php?forum_id=9211(cve@mitre.org)

https://github.com/LibreDWG/libredwg/issues/33(af854a3a-2127-422b-91ae-364da2661108)

https://savannah.gnu.org/forum/forum.php?forum_id=9211(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.