SUSE CVE-2020-21827

A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read2004compressedsection ../../src/decode.c:2379...

CVE-2020-21827

CVE-2020-21827 is a heap-based buffer overflow in GNU LibreDWG 0.10, triggered by the read_2004_compressed_section path in decode.c:2379. Affected component: GNU LibreDWG (DWG reading library). Root cause: heap overflow vulnerability in the 2004 compressed section handling. Impact (as per sources...