CVE-2022-33024

Published: Jun 23, 2022Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

There is an Assertion `int decode_preR13_entities(BITCODE_RL, BITCODE_RL, unsigned int, BITCODE_RL, BITCODE_RL, Bit_Chain *, Dwg_Data *' failed at dwg2dxf: decode.c:5801 in libredwg v0.12.4.4608.

Affected (1)

Products: Gnu: Libredwg

Gnu

1 product

Libredwg

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gnu Libredwg	Version 0.12.4.4608

Related CWEs

CWE-617

Reachable Assertion

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

References (2)

https://github.com/LibreDWG/libredwg/issues/492

Source: cve@mitre.org

ExploitIssue TrackingThird Party Advisory

https://github.com/LibreDWG/libredwg/issues/492

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingThird Party Advisory

Timeline

No history available yet.