GNU LibreDWG Heap Buffer Overflow Vulnerability

GNU LibreDWG is a GNU Project C library for working with DWG files. A security vulnerability exists in the dwgencodeentity of the commonentitydata.spec file in GNU LibreDWG version 0.9.3 and earlier. The vulnerability stems from a networked system or product performing operations in memory withou...

PT-2020-10871

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions through 0.9.3 Description An issue was discovered where crafted input leads to a heap-based buffer over-read in dwg encode entity in common entity data.spec. Recommendations For GNU LibreDWG versions through 0.9.3, consid...