CVE-2020-21827: Buffer Overflow

Published May 17, 2021

Updated

A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read2004compressedsection ../../src/decode.c:2379.

Affected Software

1 affected component

GNU LibreDWG=0.10

Event History

May 17, 2021

CVE Published

via MITRE·07:46 PM

Data Sourced

via MITRE·07:46 PM

Description

Data Sourced

via NVD·08:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2020-21827?

CVE-2020-21827 is a heap-based buffer overflow vulnerability in GNU LibreDWG 0.10.

How does CVE-2020-21827 affect GNU LibreDWG?

CVE-2020-21827 affects GNU LibreDWG 0.10.

What is the severity of CVE-2020-21827?

The severity of CVE-2020-21827 is high with a CVSS score of 7.8.

How can I fix CVE-2020-21827?

To fix CVE-2020-21827, update GNU LibreDWG to a version that is not affected by the vulnerability.

Where can I find more information about CVE-2020-21827?

You can find more information about CVE-2020-21827 at the following references: <a href="http://gnu.com">http://gnu.com</a>, <a href="https://cwe.mitre.org/data/definitions/122.html">https://cwe.mitre.org/data/definitions/122.html</a>, <a href="https://github.com/LibreDWG/libredwg/issues/183">https://github.com/LibreDWG/libredwg/issues/183</a>.