CVE-2019-20915

2020-07-1618:15:13

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.5%

JSON

An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in bit_write_TF in bits.c.

CPENameOperatorVersion
libredwgeq0.4.515
libredwgeq0.6.2.1268
libredwgeq0.6.1.1208
libredwgeq0.7.1702
libredwgeq0.7.1722
libredwgeq0.5.979
libredwgeq0.8.1902
libredwgeq0.8
libredwgeq0.8.2130
libredwgeq0.7.1293

Name	Operator	Version
libredwg	eq	0.4.515
libredwg	eq	0.6.2.1268
libredwg	eq	0.6.1.1208
libredwg	eq	0.7.1702
libredwg	eq	0.7.1722
libredwg	eq	0.5.979
libredwg	eq	0.8.1902
libredwg	eq	0.8
libredwg	eq	0.8.2130
libredwg	eq	0.7.1293