CVE Vulnerability

CWE-787

CVE-2020-23861

by

A heap-based buffer overflow vulnerability exists in LibreDWG 0.10.1 via the read_system_page function at libredwg-0.10.1/src/decode_r2007.c:666:5, which causes a denial of service by submitting a dwg file.

CVE-2020-23873

by

pdf2xml v2.0 was discovered to contain a heap-buffer overflow in the function TextPage::dump.

CVE-2020-23874

by

pdf2xml v2.0 was discovered to contain a heap-buffer overflow in the function TextPage::addAttributsNode.

CVE-2020-23877

by

pdf2xml v2.0 was discovered to contain a stack buffer overflow in the component getObjectStream.

CVE-2020-23878

by

pdf2json v0.71 was discovered to contain a stack buffer overflow in the component XRef::fetch.

CVE-2020-23886

by

XnView MP v0.96.4 was discovered to contain a heap overflow which allows attackers to cause a denial of service (DoS) via a crafted pict file. Related to a User Mode Write AV starting at ntdll!RtlpLowFragHeapFree.