GCVE - cpe:2.3:a:gnu:libredwg:0.12.5:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:libredwg:0.12.5:*:*:*:*:*:*:*

part: a version: 0.12.5 update: *

Vendor	Gnu (`575dd98a-a14a-5d9e-a2eb-97d38d86fcb9`)
Product	Libredwg (`051d7dd1-49c1-5a26-8757-6b44ca747b34`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/libredwg/libredwg`	purl2cpe	2026-06-01 10:11:54.790093
`pkg:gitlab/libredwg/libredwg`	purl2cpe	2026-06-01 10:11:54.790095
`pkg:gnu/libredwg`	purl2cpe	2026-06-01 10:11:54.790096
`pkg:rpm/opensuse/libredwg`	purl2cpe	2026-06-01 10:11:54.790098

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-36274`	vulnerable	2026-06-08 06:06:28.685665	Details available LibreDWG v0.11 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_write_TF at bits.c. Published: 2023-06-23T00:00:00.000Z Updated: 2025-03-06T20:29:35.217Z Open on db.gcve.eu Reference links https://github.com/LibreDWG/libredwg/issues/677#BUG2 https://github.com/LibreDWG/libredwg/commit/8651fa27dd2de731e706e2ba09f0d28e4e0dce33 https://github.com/LibreDWG/libredwg/blob/0.11/src/out_dxf.c#L1792	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-36273`	vulnerable	2026-06-08 06:06:28.685382	Details available LibreDWG v0.12.5 was discovered to contain a heap buffer overflow via the function bit_calc_CRC at bits.c. Published: 2023-06-23T00:00:00.000Z Updated: 2024-12-02T14:40:14.794Z Open on db.gcve.eu Reference links https://github.com/LibreDWG/libredwg/issues/677#BUG1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-36272`	vulnerable	2026-06-08 06:06:28.685040	Details available LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_utf8_to_TU at bits.c. Published: 2023-06-23T00:00:00.000Z Updated: 2025-04-08T18:17:43.430Z Open on db.gcve.eu Reference links https://github.com/LibreDWG/libredwg/issues/681#BUG1 https://github.com/LibreDWG/libredwg/commit/c1ed1d91e28a6ddc7a9b5479d4795d58fb6be0ca https://github.com/LibreDWG/libredwg/blob/0.10/src/bits.c#L1677C11-L1683C17	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-36271`	vulnerable	2026-06-08 06:06:28.683792	Details available LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_wcs2nlen at bits.c. Published: 2023-06-23T00:00:00.000Z Updated: 2025-03-06T20:34:45.486Z Open on db.gcve.eu Reference links https://github.com/LibreDWG/libredwg/issues/681#BUG2 https://github.com/LibreDWG/libredwg/commit/c1ed1d91e28a6ddc7a9b5479d4795d58fb6be0ca https://github.com/LibreDWG/libredwg/blob/0.10/src/bits.c#L1677C11-L1683C17	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-25222`	vulnerable	2026-06-08 05:56:08.683389	Details available A heap-based buffer overflow vulnerability exits in GNU LibreDWG v0.12.5 via the bit_read_RC function at bits.c. Published: 2023-03-01T00:00:00.000Z Updated: 2025-03-07T17:34:14.103Z Open on db.gcve.eu Reference links https://github.com/LibreDWG/libredwg/issues/615	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.