CVE-2018-14444: Integer Overflow
Published Jul 20, 2018
·Updated
libdxfrw 0.6.3 has an Integer Overflow in dwgCompressor::decompress18 in dwgutil.cpp, leading to an out-of-bounds read and application crash.
Affected Software
1 affected component
Libdxfrw Project Libdxfrw=0.6.3
Event History
Jul 20, 2018
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-14444?
CVE-2018-14444 is classified as a high severity vulnerability due to its potential to cause application crashes.
2
How do I fix CVE-2018-14444?
To mitigate CVE-2018-14444, update libdxfrw to a version that addresses the integer overflow vulnerability.
3
What impact does CVE-2018-14444 have on affected systems?
CVE-2018-14444 can lead to an out-of-bounds read, resulting in application crashes and possible denial of service.
4
Which software versions are affected by CVE-2018-14444?
CVE-2018-14444 affects libdxfrw version 0.6.3.
5
Can CVE-2018-14444 be exploited remotely?
Yes, CVE-2018-14444 could be exploited remotely if the vulnerable application is exposed to untrusted input.