CVE:CVE-2021-21898
CNNVD:CNNVD-202111-1558
LibreCAD是LibreCAD组织的一款开源的CAD（计算机辅助设计）应用程序。
LibreCad libdxfrw 中存在缓冲区错误漏洞，该漏洞源于产品的 dwgCompressor::decompress18 函数未能正确处理特殊的输入数据。攻击者可通过该漏洞导致堆缓冲区溢出。以下产品及版本受到影响： LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580 版本。
solution:Upgrade librecad libdxfrw to a higher version than 2.2.0-rc2-19-ge02f3580,and avoid the version 2.2.0-rc2-19-ge02f3580; Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0; Upgrade fedoraproject fedora to a higher version than 34,35,and avoid the version 34,35