CVE-2021-21900: Use After Free
Published Nov 19, 2021
·Updated
A code execution vulnerability exists in the dxfRW::processLType() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dxf file can lead to a use-after-free vulnerability. An attacker can provide a malicious file to trigger this vulnerability.
Affected Software
7 affected componentsFixes available
debian/librecad
2.1.3-1.2+deb10u12.1.3-1.3+deb11u12.2.0-1
LibreCAD libdxfrw=2.2.0-rc2-19-ge02f3580
Debian Debian Linux=9.0
Debian Debian Linux=10.0
Debian Debian Linux=11.0
Fedoraproject Fedora=34
Fedoraproject Fedora=35
Event History
Nov 19, 2021
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2021-21900?
CVE-2021-21900 is a code execution vulnerability in the dxfRW::processLType() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580.
2
How severe is CVE-2021-21900?
CVE-2021-21900 has a severity score of 8.8 (high).
3
How can the CVE-2021-21900 vulnerability be exploited?
The CVE-2021-21900 vulnerability can be exploited by providing a specially-crafted .dxf file to trigger a use-after-free vulnerability in LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580.