Vulnerability Spotlight: Heap buffer overflow vulnerability in Ribbonsoft dxflib library
Summary: Cisco Talos discovered an exploitable heap-based buffer overflow in Ribbonsoft's dxflib library, a C++ library used by digital design software such as QCAD and KiCad to parse DXF files. Tracked as TALOS-2021-1346 (CVE-2021-21897), the flaw lets an attacker who supplies a specially crafted .dxf file trigger the overflow and potentially execute remote code on the victim machine.
What's compelling: The vulnerable code sits in a parsing library reached through a file format designers open routinely, and Talos confirmed version 3.17.0 could be exploited, so any tool built on dxflib inherits the exposure until it is updated.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2021-21897
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026