PatchTheCVElibdxfrw vulnerabilities and fixes
Recent CVEs affecting libdxfrw, with upgrade or downgrade steps. 4 tracked.
libdxfrw has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2021-11-19. Highest priority: CVE-2021-21900 (score 62/100).
- CVE-2021-21900 HIGH 8.8 DOWNGRADE MITIGATE A code execution vulnerability exists in the dxfRW::processLType() functionality of LibreCad libdxfrw 2.2.0-rc
- CVE-2021-21899 HIGH 8.8 DOWNGRADE MITIGATE A code execution vulnerability exists in the dwgCompressor::copyCompBytes21 functionality of LibreCad libdxfrw
- CVE-2021-21898 HIGH 8.8 DOWNGRADE MITIGATE A code execution vulnerability exists in the dwgCompressor::decompress18() functionality of LibreCad libdxfrw
- CVE-2018-14444 HIGH 7.5 DOWNGRADE libdxfrw 0.6.3 has an Integer Overflow in dwgCompressor::decompress18 in dwgutil.cpp, leading to an out-of-bou
FAQ
How do I fix libdxfrw vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is libdxfrw being exploited right now?
None of the tracked libdxfrw CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which libdxfrw CVE should I patch first?
CVE-2021-21900 currently ranks highest (62/100): A code execution vulnerability exists in the dxfRW::processLType() functionality of LibreCad libdxfrw 2.2.0-rc.