GNU

Records1273All Threatist records

Exploited (KEV)5In CISA KEV

CVSS critical100CVSS 9.0–10.0

CVSS high470CVSS 7.0–8.9

Exploited now

GNU records in CISA KEV

TI-2026-19388 GNU InetUtils Argument Injection Vulnerability CRITICAL 100KEV 2026-01-26 TI-2014-05164 GNU Bash OS Command Injection Vulnerability CRITICAL 97KEV 2025-10-02 TI-2023-04522 GNU C Library Buffer Overflow Vulnerability CRITICAL 93KEV 2023-11-21 TI-2014-05157 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability CRITICAL 100KEV 2022-01-28 TI-2014-05975 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability CRITICAL 100KEV 2022-01-28

Components

Products in the NVD configurations · select one to filter the records

Binutils 288 records HIGH Glibc 163 records CRITICAL Libredwg 88 records HIGH Gnutls 74 records CRITICAL Grub2 48 records HIGH Mailman 47 records HIGH Emacs 35 records HIGH Wget 23 records HIGH

Records

88 records in Libredwg · all components

TI-2023-18183 CVE-2023-36273 · GHSA-pggm-5qmx-5jg9

LibreDWG v0.12.5 was discovered to contain a heap buffer overflow via the function bit_calc_CRC at bits.c.

HIGH 73

LibreDWG v0.12.5 was discovered to contain a heap buffer overflow via the function bit_calc_CRC at bits.c.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00703 Published 2023-06-23 No fix listed CWE-787

TI-2023-18182 CVE-2023-36272 · GHSA-v7hc-4p56-pcfx

LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_utf8_to_TU at bits.c.

HIGH 73

LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_utf8_to_TU at bits.c.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00921 Published 2023-06-23 No fix listed CWE-787

TI-2023-18181 CVE-2023-36271 · GHSA-fx57-4pvv-5x6q

LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_wcs2nlen at bits.c.

HIGH 73

LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_wcs2nlen at bits.c.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00921 Published 2023-06-23 No fix listed CWE-787

TI-2023-10675 CVE-2023-25222 · GHSA-wrhc-5xmp-hp3p

A heap-based buffer overflow vulnerability exits in GNU LibreDWG v0.12.5 via the bit_read_RC function at bits.c.

HIGH 73

A heap-based buffer overflow vulnerability exits in GNU LibreDWG v0.12.5 via the bit_read_RC function at bits.c.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00815 Published 2023-03-01 No fix listed CWE-787

TI-2022-22309 CVE-2022-45332 · GHSA-5r42-pgpf-xr9w

LibreDWG v0.12.4.4643 was discovered to contain a heap buffer overflow via the function…

HIGH 69

LibreDWG v0.12.4.4643 was discovered to contain a heap buffer overflow via the function decode_preR13_section_hdr at decode_r11.c.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00315 Published 2022-11-30 No fix listed CWE-787

TI-2019-15128 CVE-2019-20914 · GHSA-4x8f-6m48-c263

An issue was discovered in GNU LibreDWG through 0.9.3.

MEDIUM 46

An issue was discovered in GNU LibreDWG through 0.9.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0192 Published 2020-07-16 No fix listed CWE-476

TI-2021-09446 CVE-2021-28237 · GHSA-rc9p-cjq8-2vpg

LibreDWG v0.12.3 was discovered to contain a heap-buffer overflow via decode_preR13.

MEDIUM 45

LibreDWG v0.12.3 was discovered to contain a heap-buffer overflow via decode_preR13.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01409 Published 2021-12-02 No fix listed CWE-787

TI-2019-07167 CVE-2019-9775 · GHSA-qvgp-gh6x-5g75

An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645.

MEDIUM 45

An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02968 Published 2019-03-14 No fix listed CWE-125

TI-2019-07166 CVE-2019-9774 · GHSA-hc3h-5vwc-r8f4

An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645.

MEDIUM 45

An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02968 Published 2019-03-14 No fix listed CWE-125

TI-2022-15873 CVE-2022-35164 · GHSA-c2cm-gvqh-rxhh

LibreDWG v0.12.4.4608 & commit f2dea29 was discovered to contain a heap use-after-free via bit_copy_chain.

MEDIUM 44

LibreDWG v0.12.4.4608 & commit f2dea29 was discovered to contain a heap use-after-free via bit_copy_chain.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01069 Published 2022-08-18 No fix listed CWE-416

TI-2023-18184 CVE-2023-36274 · GHSA-fjhg-vc4c-336q

LibreDWG v0.11 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_write_TF at bits.c.

MEDIUM 42

LibreDWG v0.11 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_write_TF at bits.c.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00921 Published 2023-06-23 No fix listed CWE-787

TI-2020-05436 CVE-2020-6609 · GHSA-gcf7-rjxq-p38r

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in read_pages_map in decode_r2007.c.

MEDIUM 42

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in read_pages_map in decode_r2007.c.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01755 Published 2020-01-08 No fix listed CWE-125

TI-2021-14530 CVE-2021-36080 · GHSA-qj5h-583m-qh6v

GNU LibreDWG 0.12.3.4163 through 0.12.3.4191 has a double-free in bit_chain_free (called…

MEDIUM 41

GNU LibreDWG 0.12.3.4163 through 0.12.3.4191 has a double-free in bit_chain_free (called from dwg_encode_MTEXT and dwg_encode_add_object).

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01327 Published 2021-07-01 No fix listed CWE-415

TI-2020-14191 CVE-2020-21844 · GHSA-4f2c-7x9q-gqpq

GNU LibreDWG 0.10 is affected by: memcpy-param-overlap.

MEDIUM 41

GNU LibreDWG 0.10 is affected by: memcpy-param-overlap.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01525 Published 2021-05-17 No fix listed

TI-2019-15126 CVE-2019-20912 · GHSA-p5v3-7243-m33v

An issue was discovered in GNU LibreDWG through 0.9.3.

MEDIUM 41

An issue was discovered in GNU LibreDWG through 0.9.3.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01321 Published 2020-07-16 No fix listed CWE-787

TI-2019-14441 CVE-2019-20014 · GHSA-3gjp-xpv8-rjh5

An issue was discovered in GNU LibreDWG before 0.93.

MEDIUM 41

An issue was discovered in GNU LibreDWG before 0.93.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01487 Published 2019-12-27 No fix listed CWE-415

TI-2019-14438 CVE-2019-20011 · GHSA-7658-qf63-85h9

An issue was discovered in GNU LibreDWG 0.92.

MEDIUM 41

An issue was discovered in GNU LibreDWG 0.92.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0147 Published 2019-12-27 No fix listed CWE-125

TI-2019-14437 CVE-2019-20010 · GHSA-mc63-h6wh-r8v8

An issue was discovered in GNU LibreDWG 0.92.

MEDIUM 41

An issue was discovered in GNU LibreDWG 0.92.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01429 Published 2019-12-27 No fix listed CWE-416

TI-2021-18863 CVE-2021-42586 · GHSA-mx9j-5cm7-gv82

A heap buffer overflow was discovered in copy_bytes in decode_r2007.c in dwgread before 0.12.4 via a crafted dwg file.

MEDIUM 40

A heap buffer overflow was discovered in copy_bytes in decode_r2007.c in dwgread before 0.12.4 via a crafted dwg file.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0103 Published 2022-05-23 No fix listed CWE-787

TI-2021-18862 CVE-2021-42585 · GHSA-cm63-q44g-45j5

A heap buffer overflow was discovered in copy_compressed_bytes in decode_r2007.c in…

MEDIUM 40

A heap buffer overflow was discovered in copy_compressed_bytes in decode_r2007.c in dwgread before 0.12.4 via a crafted dwg file.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01019 Published 2022-05-23 No fix listed CWE-787

TI-2021-16795 CVE-2021-39530 · GHSA-vpfp-r4p5-f5w5