3 matches found
SUSE CVE-2019-20009
An issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted excessive memory allocation in dwgdecodeSPLINEprivate in dwg.spec...
6.5CVSS6.4AI score0.01373EPSS
SaveExploits1References5
Memory corruption
An issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted excessive memory allocation in dwgdecodeSPLINEprivate in dwg.spec...
4.3CVSS6.3AI score0.01373EPSS
SaveExploits1References5Affected Software3
CVE-2019-20009
CVE-2019-20009 affects GNU LibreDWG prior to 0.93. The issue arises from crafted input causing an attempted excessive memory allocation in dwg_decode_SPLINE_private in dwg.spec, leading to memory exhaustion. Multiple connected advisories (openSUSE/SUSE) document the vulnerability and confirm reme...
6.5CVSS7.4AI score0.01373EPSS
SaveExploits1References5Affected Software1
20