tocsin

Debian/librecad: high 8.8

A code execution vulnerability exists in the dxfRW::processLType() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dxf file can lead to a use-after-free vulnerability.

Action: Upgrade librecad to 2.1.3-2 or later.

Affected

introducedfixedlast affected
02.1.3-2-

Fixed versions

2.1.3-2

Sources

published · modified · JSON