CVE-2021-21898: Buffer Overflow
A code execution vulnerability exists in the dwgCompressor::decompress18() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-21898?
CVE-2021-21898 is classified as a code execution vulnerability with high severity due to its potential to lead to out-of-bounds writes.
How do I fix CVE-2021-21898?
To fix CVE-2021-21898, upgrade to LibreCad libdxfrw versions 2.1.3-1.2+deb10u1, 2.1.3-1.3+deb11u1, or 2.2.0-1.
Which software is affected by CVE-2021-21898?
CVE-2021-21898 affects LibreCad libdxfrw version 2.2.0-rc2-19-ge02f3580 as well as specific versions of Debian and Fedora.
What type of vulnerability is CVE-2021-21898?
CVE-2021-21898 is a code execution vulnerability that can be triggered by maliciously crafted .dwg files.
What can an attacker achieve with CVE-2021-21898?
An attacker can exploit CVE-2021-21898 to execute arbitrary code on a victim's system via the vulnerable LibreCad software.