CVE-2019-20915: High severity gnu libredwg vulnerability
Published Jul 16, 2020
·Updated
An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in bitwriteTF in bits.c.
Affected Software
1 affected component
GNU LibreDWG<=0.9.3
Remediation
Event History
Jul 16, 2020
CVE Published
via MITRE·05:46 PM
Data Sourced
via MITRE·05:46 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-20915?
CVE-2019-20915 has a medium severity level due to the potential for a heap-based buffer over-read.
2
How do I fix CVE-2019-20915?
To fix CVE-2019-20915, update GNU LibreDWG to version 0.9.4 or later.
3
What are the potential impacts of CVE-2019-20915?
The potential impacts of CVE-2019-20915 include information disclosure and application crashes.
4
Which versions of GNU LibreDWG are affected by CVE-2019-20915?
Versions of GNU LibreDWG up to and including 0.9.3 are affected by CVE-2019-20915.
5
Is there a workaround for CVE-2019-20915?
There are no officially documented workarounds for CVE-2019-20915, so updating is strongly advised.