CVE-2019-20910 - An issue was discovered in GNU LibreDWG through 0.9.3

Back Back to CVE browser

HIGH

An issue was discovered in GNU LibreDWG through 0.9.3

Published Jul 16, 2020

8.1

HIGH

CVSS 3.1

EPSS 1.24%

Description

An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in decode_R13_R2000 in decode.c, a different vulnerability than CVE-2019-20011.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-11444
Advisory
https://github.com/LibreDWG/libredwg/commit/f878ba67b638f0d5050b6dba61b9737f64fc53de
x_refsource_MISCPatchThird Party Advisory
https://github.com/LibreDWG/libredwg/issues/178
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-11444		Advisory
https://github.com/LibreDWG/libredwg/commit/f878ba67b638f0d5050b6dba61b9737f64fc53de		x_refsource_MISCPatchThird Party Advisory
https://github.com/LibreDWG/libredwg/issues/178		x_refsource_MISCExploitThird Party Advisory