PT-2018-12565 · Gnu · Gnu Libredwg

Reini_Urban · Published 2018-07-23 · Updated 2024-06-15 · CVE-2018-14524

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions prior to 0.6

Description The issue arises from improper management of the obj->eed value after a free occurs in the dwg decode eed function in decode.c, leading to a double free in the dwg free eed function in free.c.

Recommendations For versions prior to 0.6, update to version 0.6 or later to resolve the issue.

Fix

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

CVE-2018-14524

OPENSUSE-SU-2024:10981-1

Affected Products

Gnu Libredwg

References · 25

• https://savannah.gnu.org/forum/forum.php?forum_id=9211 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2024:10981-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-14524 · Security Note
• https://osv.dev/vulnerability/CVE-2018-14524 · Vendor Advisory
• https://github.com/LibreDWG/libredwg/issues/33 · Note
• https://suse.com/security/cve/CVE-2019-9774 · Note
• https://suse.com/security/cve/CVE-2019-9778 · Note
• https://suse.com/security/cve/CVE-2019-9770 · Note
• https://suse.com/security/cve/CVE-2019-20010 · Note
• https://suse.com/security/cve/CVE-2019-20009 · Note
• https://suse.com/security/cve/CVE-2019-9773 · Note
• https://suse.com/security/cve/CVE-2019-9772 · Note
• https://suse.com/security/cve/CVE-2020-6615 · Note
• https://suse.com/security/cve/CVE-2019-9771 · Note
• https://suse.com/security/cve/CVE-2019-9779 · Note