CVE-2019-20913: High severity gnu libredwg vulnerability
Published Jul 16, 2020
·Updated
An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in dwgencodeentity in commonentitydata.spec.
Affected Software
1 affected component
GNU LibreDWG<=0.9.3
Remediation
Event History
Jul 16, 2020
CVE Published
via MITRE·05:46 PM
Data Sourced
via MITRE·05:46 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-20913?
CVE-2019-20913 is classified as a moderate severity vulnerability that can lead to a heap-based buffer over-read.
2
How do I fix CVE-2019-20913?
To mitigate CVE-2019-20913, upgrade GNU LibreDWG to version 0.9.4 or later.
3
What versions of GNU LibreDWG are affected by CVE-2019-20913?
Versions of GNU LibreDWG up to and including 0.9.3 are affected by CVE-2019-20913.
4
What attack vectors are associated with CVE-2019-20913?
CVE-2019-20913 can be exploited through crafted input files processed by the affected version of LibreDWG.
5
What type of vulnerability is CVE-2019-20913?
CVE-2019-20913 is a buffer over-read vulnerability that occurs in the dwg_encode_entity function.