QSearchQSearch

CVE-2021-39528

8.8 HIGH

An issue was discovered in libredwg through v0.10.1.3751

Published: 2021-09-20 · Last updated: 2026-06-17

Severity and scoring

CVSS
8.8 HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE
CWE-415

Affected products

VendorProduct
gnulibredwg

Description

An issue was discovered in libredwg through v0.10.1.3751. dwg_free_MATERIAL_private() in dwg.spec has a double free.

Source: NVD

References

Related CVEs

Same vendor

  • CVE-2026-42009 — A flaw was found in gnutls (7.5 HIGH)
  • CVE-2026-42010 — A flaw was found in gnutls (7.1 HIGH)
  • CVE-2026-3833 — A flaw was found in gnutls (6.5 MEDIUM)
  • CVE-2026-3832 — A flaw was found in gnutls (3.7 LOW)
  • CVE-2026-33845 — A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow ... (7.5 HIGH)

Same CWE

  • CVE-2026-12043 — Improper handling of HPACK dynamic table size updates in the AWS Common Runtime aws-c-http library might allow a remote threat actor oper... (8.8 HIGH)
  • CVE-2026-46690 — unbounded_spsc is an "unbounded" extension of bounded_spsc_queue (5.8 MEDIUM)
  • CVE-2026-35188 — Issue summary: A malicious server can exploit TLS OCSP stapling by delivering a crafted response through the status_request extension, tr... (5.0 MEDIUM)
  • CVE-2026-45324 — Rizin is a UNIX-like reverse engineering framework and command-line toolset (3.3 LOW)
  • CVE-2026-44422 — FreeRDP is a free implementation of the Remote Desktop Protocol (7.5 HIGH)