CVE-2021-21899: Buffer Overflow
A code execution vulnerability exists in the dwgCompressor::copyCompBytes21 functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-21899?
CVE-2021-21899 is classified as a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2021-21899?
To fix CVE-2021-21899, update LibreCad libdxfrw to versions 2.1.3-1.2+deb10u1, 2.1.3-1.3+deb11u1, or 2.2.0-1 as appropriate.
Who is affected by CVE-2021-21899?
CVE-2021-21899 affects users of LibreCad libdxfrw version 2.2.0-rc2-19-ge02f3580 and various Debian and Fedora distributions.
What could an attacker do with CVE-2021-21899?
An attacker could exploit CVE-2021-21899 by crafting a malicious .dwg file, leading to a heap buffer overflow and potential code execution.
What kind of vulnerability is CVE-2021-21899?
CVE-2021-21899 is a code execution vulnerability characterized by a heap buffer overflow.