CVE-2022-33025: Use After Free
Published Jun 22, 2022
·Updated
LibreDWG v0.12.4.4608 was discovered to contain a heap-use-after-free via the function decodepreR13section at decoder11.c.
Affected Software
1 affected component
GNU LibreDWG
Event History
Jun 22, 2022
CVE Published
via MITRE·01:33 PM
Data Sourced
via MITRE·01:33 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for the LibreDWG heap-use-after-free vulnerability?
The vulnerability ID for the LibreDWG heap-use-after-free vulnerability is CVE-2022-33025.
2
What is the severity of CVE-2022-33025?
The severity of CVE-2022-33025 is high with a CVSS score of 7.8.
3
What software is affected by CVE-2022-33025?
The GNU LibreDWG software is affected by CVE-2022-33025.
4
What is the CWE ID for the LibreDWG heap-use-after-free vulnerability?
The CWE ID for the LibreDWG heap-use-after-free vulnerability is CWE-416.
5
Where can I find more information about CVE-2022-33025?
You can find more information about CVE-2022-33025 on the GitHub page for LibreDWG: https://github.com/LibreDWG/libredwg/issues/487