https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-21898.htmlhttps://patchthecve.com/cve/CVE-2021-21898.htmlWed, 17 Jun 2026 03:36:19 +0000HIGH 8.8: A code execution vulnerability exists in the dwgCompressor::decompress18() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.https://patchthecve.com/cve/CVE-2021-21900.htmlhttps://patchthecve.com/cve/CVE-2021-21900.htmlWed, 17 Jun 2026 03:36:19 +0000HIGH 8.8: A code execution vulnerability exists in the dxfRW::processLType() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dxf file can lead to a use-after-free vulnerability. An attacker can provide a malicious file to trigger this vulnerability.https://patchthecve.com/cve/CVE-2021-21899.htmlhttps://patchthecve.com/cve/CVE-2021-21899.htmlWed, 17 Jun 2026 03:36:19 +0000HIGH 8.8: A code execution vulnerability exists in the dwgCompressor::copyCompBytes21 functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.https://patchthecve.com/cve/CVE-2018-14444.htmlhttps://patchthecve.com/cve/CVE-2018-14444.htmlWed, 17 Jun 2026 01:41:00 +0000HIGH 7.5: libdxfrw 0.6.3 has an Integer Overflow in dwgCompressor::decompress18 in dwgutil.cpp, leading to an out-of-bounds read and application crash.