librecad, stretch is vulnerable to remote code execution. The vulnerability exists due to buffer overflow vulnerability in CDataList of the jwwlib component in LibreCAD allows an attacker to achieve Remote Code Execution using a crafted JWW document.
github.com/LibreCAD/LibreCAD/issues/1464
lists.fedoraproject.org/archives/list/[email protected]/message/FCC2FZ6HZOIK3775K4MTCOUHX6PLGPEL/
lists.fedoraproject.org/archives/list/[email protected]/message/VUMH3CWGVSMR2UIZEA35Q5UB7PDVVVYS/
security-tracker.debian.org/tracker/CVE-2021-45342
www.debian.org/security/2022/dsa-5077