CVE-2023-36272
Fixed in a distro release EPSS <1%CVSS 8.8
LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_utf8_to_TU at bits.c.
Products: gnu libredwg
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| SUSE Package Hub 15 SP5 | libredwg | 0.12.5.5907-bp155.3.3.1 |
| openSUSE Leap 15.5 | libredwg | 0.12.5.5907-bp155.3.3.1 |