CVE-2023-26157
Versions of the package libredwg before 0.12.5.6384 are vulnerable to Denial of Service (DoS) due to an out-of-bounds read involving section->num_page...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Versions of the package libredwg before 0.12.5.6384 are vulnerable to Denial of Service (DoS) due to an out-of-bounds read involving section->num_pages in decode_r2007.c.
Références
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- report github.com
- web security.snyk.io