PT-2022-21654 · Libredwg · Libredwg

Cxlzff · Published 2022-06-22 · Updated 2023-01-23 · CVE-2022-33026

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LibreDWG version 0.12.4.4608

Description A heap buffer overflow issue was discovered in the bit calc CRC function at bits.c, which can be exploited.

Recommendations For LibreDWG version 0.12.4.4608, consider disabling the bit calc CRC function as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2022-33026

Affected Products

Libredwg

References · 4

• 🔥 https://github.com/LibreDWG/libredwg/issues/484 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-33026 · Security Note
• https://osv.dev/vulnerability/CVE-2022-33026 · Vendor Advisory
• https://t.me/cibsecurity/45010 · Telegram Post