CVE-2021-45341

A buffer overflow vulnerability in CDataMoji of the jwwlib component of LibreCAD 2.2.0-rc3 and older allows an attacker to achieve Remote Code Execution using a crafted JWW document.

• CWE-120

• https://github.com/LibreCAD/LibreCAD/issues/1462Exploit, Issue Tracking, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FCC2FZ6HZOIK3775K4MTCOUHX6PLGPEL/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUMH3CWGVSMR2UIZEA35Q5UB7PDVVVYS/
• https://security.gentoo.org/glsa/202305-26
• https://www.debian.org/security/2022/dsa-5077Third Party Advisory
• https://github.com/LibreCAD/LibreCAD/issues/1462Exploit, Issue Tracking, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FCC2FZ6HZOIK3775K4MTCOUHX6PLGPEL/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUMH3CWGVSMR2UIZEA35Q5UB7PDVVVYS/
• https://security.gentoo.org/glsa/202305-26
• https://www.debian.org/security/2022/dsa-5077Third Party Advisory

Published

Jan 25, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-45335Sandbox component in Avast Antivirus prior to 20.4 has an in…8.8
• CVE-2021-45336Privilege escalation vulnerability in the Sandbox component …8.8
• CVE-2021-45337Privilege escalation vulnerability in the Self-Defense drive…8.8
• CVE-2021-45338Multiple privilege escalation vulnerabilities in Avast Antiv…7.8
• CVE-2021-45339Privilege escalation vulnerability in Avast Antivirus prior …7.8
• CVE-2021-45340In Libsixel prior to and including v1.10.3, a NULL pointer d…6.5
• CVE-2021-45342A buffer overflow vulnerability in CDataList of the jwwlib c…7.8
• CVE-2021-45343In LibreCAD 2.2.0, a NULL pointer dereference in the HATCH h…5.5
• CVE-2021-45345Buffer Overflow vulnerability found in En3rgy WebcamServer v…7.5
• CVE-2021-45346A Memory Leak vulnerability exists in SQLite Project SQLite3…4.3
• CVE-2021-45347An Incorrect Access Control vulnerability exists in zzcms 8.…7.5
• CVE-2021-45348An Arbitrary File Deletion vulnerability exists in SourceCod…7.5